Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 122 of 215.
- CVE-2020-24456 Misconfiguration in Intel(R) Board ID Tool
- CVE-2020-24455 Privilege escalation in TPM2 source
- CVE-2020-24454 XML external entity in Intel(R) Quartus(R) Prime Pro Edition and Intel(R) Quartus(R) Prime Standard Edition
- CVE-2020-24453 Privilege escalation in Intel(R) EPID SDK
- CVE-2020-24452 Denial of service in Intel(R) SGX Platform Software for Windows*
- CVE-2020-24451 Privilege escalation in Intel(R) Optane(TM) DC Persistent Memory installer for Windows*
- CVE-2020-24450 Privilege escalation in Intel(R) Graphics Drivers
- CVE-2020-24448 Denial of service in Intel(R) Graphics Drivers
- CVE-2020-24447 Uncontrolled Search Path Element vulnerability in Lightroom Classic 10.0
- CVE-2020-24445 Cross-site Scripting Vulnerability in Commenting Function of Adobe Experience Manager (AEM)
- CVE-2020-24444 Blind SSRF in Forms add-on for AEM
- CVE-2020-24443 Reflected Cross-Site Scripting (XSS) in Adobe Connect
- CVE-2020-24442 Reflected Cross-Site Scripting (XSS) in Adobe Connect
- CVE-2020-24441 Improper Access Control in Adobe Acrobat Reader for Android
- CVE-2020-24440 Uncontrolled Search Path Element in Adobe Prelude for Windows
- CVE-2020-24439 Acrobat Reader DC for macOS Signature Validation Bypass
- CVE-2020-24438 Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Information Disclosure
- CVE-2020-24437 Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Arbitrary Code Execution
- CVE-2020-24436 Acrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability Could Lead to Arbitrary Code Execution
- CVE-2020-24435 Acrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code Execution
- CVE-2020-24434 Acrobat Pro DC Out-Of-Bounds Read Vulnerability Could Lead to Information Disclosure
- CVE-2020-24433 Adobe Acrobat Reader DC Local Privilege Escalation via Installer Component
- CVE-2020-24432 Acrobat Reader DC Arbitrary JavaScript Execution in PDF Documents
- CVE-2020-24431 Acrobat Reader DC for macOS Dynamic Library Injection Vulnerability
- CVE-2020-24430 Acrobat Pro DC Use-After-Free vulnerability Could Lead to Arbitrary Code Execution
- CVE-2020-24429 Acrobat Reader DC for macOS Signature Verification Bypass Could Lead to Privilege Escalation
- CVE-2020-24428 Acrobat Reader DC for macOS Race Condition Vulnerability Could Lead to Privilege Escalation
- CVE-2020-24427 Acrobat Reader DC Codec Input Validation Vulnerability Could Lead to Information Disclosure
- CVE-2020-24426 Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2020-24425 Privilege escalation vulnerability in Dreamweaver version 20.2
- CVE-2020-24424 Uncontrolled Search Path in Adobe Premiere Pro for Windows
- CVE-2020-24423 Uncontrolled Search Path in Adobe Media Encoder for Windows
- CVE-2020-24422 Uncontrolled Search Path in Creative Cloud Desktop Application
- CVE-2020-24421 Adobe InDesign 15.1.2 NULL Pointer Dereference Bug
- CVE-2020-24420 Uncontrolled Search Path Element in Adobe Photoshop for Windows
- CVE-2020-24419 Uncontrolled Search Path Element in Adobe After Effects for Windows
- CVE-2020-24418 Adobe After Effects Out-of-Bounds Read Vulnerability
- CVE-2020-24416 Blind stored XSS in Marketo Sales insight plugin for SalesForce
- CVE-2020-24415 Adobe Illustrator Memory Corruption Vulnerability
- CVE-2020-24414 Adobe Illustrator Memory Corruption Vulnerability
- CVE-2020-24413 Adobe Illustrator Memory Corruption Vulnerability
- CVE-2020-24412 Adobe Illustrator Memory Corruption Vulnerability
- CVE-2020-24411 Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Vulnerability
- CVE-2020-24410 Adobe Illustrator PDF File Parsing Out-Of-Bounds Read Vulnerability
- CVE-2020-24409 Adobe Illustrator PDF File Parsing Out-Of-Bounds Read Vulnerability
- CVE-2020-24408 Stored XSS in customer address upload feature
- CVE-2020-24407 Arbitrary code execution via file import functionality
- CVE-2020-24406 Document root path disclosure on Maintenance page
- CVE-2020-24405 Incorrect permissions in Inventory module could lead to unauthorized modification of inventory stock data
- CVE-2020-24404 Incorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API
- CVE-2020-24403 Incorrect permissions could lead to unauthorized modification of inventory source data via REST API
- CVE-2020-24402 Magento incorrect permissions vulnerability in the Integrations component
- CVE-2020-24401 Incorrect permissions following the deletion of a user role or deactivation of a user
- CVE-2020-24400 SQL injection allows arbitrary read from database
- CVE-2020-24397 Integer overflow in zohocorp:manageengine desktop central
- CVE-2020-24396 Hardcoded credentials in hom.ee:brain cube core
- CVE-2020-24395 Security feature bypass in hom.ee:brain cube core
- CVE-2020-24394 Misconfiguration in canonical:ubuntu linux
- CVE-2020-24393 Improper Certificate Validation in TweetStream
- CVE-2020-24392 Improper Certificate Validation in twitter-stream
- CVE-2020-24391 Remote code execution in mongo-express
- CVE-2020-24390 Cross-site scripting in eyesofnetwork:eyesofnetwork
- CVE-2020-24388 Memory corruption in fedoraproject:fedora
- CVE-2020-24387 Memory corruption in fedoraproject:fedora
- CVE-2020-24386 Information disclosure in debian:debian linux
- CVE-2020-24385 Null dereference in freebsd:freebsd
- CVE-2020-24384 Code injection in a10networks:advanced core operating system
- CVE-2020-24383 Memory corruption in butok:fnet
- CVE-2020-24381 Information disclosure in gunet:open eclass platform
- CVE-2020-24379 XML external entity in canonical:ubuntu linux
- CVE-2020-24377 Other in free:freebox delta firmware
- CVE-2020-24376 Other in free:freebox delta firmware
- CVE-2020-24375 Security feature bypass in free:freebox server
- CVE-2020-24374 Other in free:freebox hd firmware
- CVE-2020-24373 Cross-site request forgery in free:freebox delta firmware
- CVE-2020-24372 Memory corruption in luajit:luajit
- CVE-2020-24371 Memory corruption in lua:lua
- CVE-2020-24370 Integer overflow in debian:debian linux
- CVE-2020-24369 Null dereference in lua:lua
- CVE-2020-24368 Path traversal in debian:debian linux
- CVE-2020-24367 Privilege escalation in bluestacks:bluestacks
- CVE-2020-24366 Information disclosure in jetbrains:youtrack
- CVE-2020-24365 Command injection in gemteks:wrtm-127acn firmware
- CVE-2020-24364 Command injection in ethz:minetime
- CVE-2020-24363 TP-link TL-WA855RE Missing Authentication for Critical Function
- CVE-2020-24361 Command injection in debian:debian linux
- CVE-2020-24360 Denial of service in arista:eos
- CVE-2020-24359 Improper Input Validation in vault-ssh-helper
- CVE-2020-24356 Local Privilege Escalation in cloudflared
- CVE-2020-24355 Privilege escalation in zyxel:vmg5313-b30b firmware
- CVE-2020-24354 Command injection in zyxel:vmg5313-b30b firmware
- CVE-2020-24353 Cross-site scripting in pega:pega platform
- CVE-2020-24352 Memory corruption in qemu:qemu
- CVE-2020-24349 Use after free in f5:njs
- CVE-2020-24348 Memory corruption in f5:njs
- CVE-2020-24347 Memory corruption in f5:njs
- CVE-2020-24346 Use after free in f5:njs
- CVE-2020-24345 Denial of service in jerryscript:jerryscript
- CVE-2020-24344 Memory corruption in jerryscript:jerryscript
- CVE-2020-24343 Use after free in artifex:mujs