Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 127 of 215.
- CVE-2020-23234 Cross Site Scripting in LavaLite CMS
- CVE-2020-2323 Missing permission checks in Jenkins Chaos Monkey Plugin
- CVE-2020-23226 Cross-site scripting in cacti:cacti
- CVE-2020-2322 Missing permission checks in Jenkins Chaos Monkey Plugin
- CVE-2020-23219 Code injection in monstra:monstra cms
- CVE-2020-23217 Cross-site scripting in phplist:phplist
- CVE-2020-23214 Cross-site scripting in phplist:phplist
- CVE-2020-2321 CSRF vulnerability in Jenkins Shelve Project Plugin
- CVE-2020-23209 Cross-site scripting in phplist:phplist
- CVE-2020-23208 Cross-site scripting in phplist:phplist
- CVE-2020-23207 Cross-site scripting in phplist:phplist
- CVE-2020-23205 Cross-site scripting in monstra:monstra cms
- CVE-2020-2320 Jenkins Plugin Installation Manager Tool did not verify plugin downloads
- CVE-2020-23194 Cross-site scripting in phplist:phplist
- CVE-2020-23192 Cross-site scripting in phplist:phplist
- CVE-2020-23190 Cross-site scripting in phplist:phplist
- CVE-2020-2319 Password stored in plain text by Jenkins VMware Lab Manager Slaves Plugin
- CVE-2020-23185 Cross-site scripting in php-fusion:php-fusion
- CVE-2020-23184 Cross-site scripting in php-fusion:php-fusion
- CVE-2020-23182 Open redirect in php-fusion:php-fusion
- CVE-2020-23181 Cross-site scripting in php-fusion:php-fusion
- CVE-2020-2318 Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin
- CVE-2020-23179 Cross-site scripting in php-fusion:php-fusion
- CVE-2020-23178 Auth bypass in php-fusion:php-fusion
- CVE-2020-23172 Path traversal in kuba project:kuba
- CVE-2020-23171 Path traversal in nim-lang:nim-lang
- CVE-2020-2317 Stored XSS vulnerability in Jenkins FindBugs Plugin
- CVE-2020-23162 Weak cryptography in pyres:termod4 firmware
- CVE-2020-23161 Path traversal in pyres:termod4 firmware
- CVE-2020-23160 Command injection in pyres:termod4 firmware
- CVE-2020-2316 Stored XSS vulnerability in Jenkins Static Analysis Utilities Plugin
- CVE-2020-23151 Command injection in rconfig:rconfig
- CVE-2020-23150 SQL injection in rconfig:rconfig
- CVE-2020-2315 XXE vulnerability in Jenkins Visualworks Store Plugin
- CVE-2020-23149 SQL injection in rconfig:rconfig
- CVE-2020-23148 Other in rconfig:rconfig
- CVE-2020-23140 Auth bypass in microweber:microweber
- CVE-2020-2314 Password stored in plain text by Jenkins AppSpider Plugin
- CVE-2020-23139 Auth bypass in microweber:microweber
- CVE-2020-23138 File upload in microweber:microweber
- CVE-2020-23136 Microweber Insufficient Session Expiry
- CVE-2020-2313 Missing permission checks in Jenkins Azure Key Vault Plugin allow enumerating credentials IDs
- CVE-2020-23128 Privilege escalation in chamilo:chamilo lms
- CVE-2020-23127 Cross-site request forgery in chamilo:chamilo lms
- CVE-2020-23126 Cross-site scripting in chamilo:chamilo lms
- CVE-2020-2312 Password written to the build log by Jenkins SQLPlus Script Runner Plugin
- CVE-2020-2311 Missing permission check in Jenkins AWS Global Configuration Plugin allows replacing plugin configuration
- CVE-2020-23109 Memory corruption in struktur:libheif
- CVE-2020-2310 Missing permission checks in Jenkins Ansible Plugin allow enumerating credentials IDs
- CVE-2020-2309 Missing authorization in Jenkins Kubernetes Plugin
- CVE-2020-23083 File upload in guojusoft:jeecg
- CVE-2020-2308 Missing Authorization in Jenkins Kubernetes Plugin
- CVE-2020-23079 Server-side request forgery in halo:halo
- CVE-2020-2307 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes Plugin
- CVE-2020-23069 Path traversal in webtareas project:webtareas
- CVE-2020-23065 Cross-site scripting in ibexa:ezpublish legacy
- CVE-2020-23061 Path traversal in dropouts:super backup
- CVE-2020-23060 Memory corruption in tonec:internet download manager
- CVE-2020-2306 Missing Authorization in Jenkins Mercurial Plugin
- CVE-2020-23058 Auth bypass in file explorer project:file explorer
- CVE-2020-23055 Cross-site scripting in lancom-systems:lcos
- CVE-2020-23054 Cross-site scripting in user-agent switcher and manager project:user-agent switcher and manager
- CVE-2020-23052 Cross-site scripting in catalyst:mahara
- CVE-2020-23051 Cross-site scripting in user registration \& login and user management system with admin panel project:user registration \& login and user management system with admin panel
- CVE-2020-23050 Cross-site scripting in taotesting:tao assessment platform
- CVE-2020-2305 XXE vulnerability in Jenkins Mercurial Plugin
- CVE-2020-23049 Cross-site scripting in forkcms
- CVE-2020-23048 Cross-site scripting in seeddms:seeddms
- CVE-2020-23047 Cross-site scripting in macs cms project:macs cms
- CVE-2020-23046 Cross-site scripting in dedecms:dedecms
- CVE-2020-23045 SQL injection in macs cms project:macs cms
- CVE-2020-23044 Cross-site scripting in dedecms:dedecms
- CVE-2020-23043 File upload in air sender project:air sender
- CVE-2020-23042 Cross-site scripting in dropouts:super backup
- CVE-2020-23041 Cross-site scripting in dropouts:air share
- CVE-2020-23040 Path traversal in sky file project:sky file
- CVE-2020-2304 XXE vulnerability in Jenkins Subversion Plugin
- CVE-2020-23039 Cross-site scripting in newsoftwares:folder lock
- CVE-2020-23038 Information disclosure in kumilabs:swift file transfer
- CVE-2020-23037 Code injection in portable:playable
- CVE-2020-23036 Weak cryptography in medianavi:smacom
- CVE-2020-2303 CSRF vulnerability in Jenkins Active Directory Plugin
- CVE-2020-23026 Null dereference in dhrystone project:dhrystone
- CVE-2020-2302 Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page
- CVE-2020-23015 Open redirect in opnsense:opnsense
- CVE-2020-23014 Cross-site scripting in apfell project:apfell
- CVE-2020-2301 Authentication cache in Active Directory Jenkins Plugin allows logging in with any password
- CVE-2020-2300 Improper Authentication (empty password) in Jenkins Active Directory Plugin
- CVE-2020-2299 Improper Authentication in Jenkins Active Directory Plugin
- CVE-2020-22987 Cross-site scripting in microstrategy:microstrategy web sdk
- CVE-2020-22986 Cross-site scripting in microstrategy:microstrategy web sdk
- CVE-2020-22985 Cross-site scripting in microstrategy:microstrategy web sdk
- CVE-2020-22984 Cross-site scripting in microstrategy:microstrategy web sdk
- CVE-2020-22983 Server-side request forgery in microstrategy:microstrategy web
- CVE-2020-2298 XXE vulnerability in Jenkins Nerrvana Plugin
- CVE-2020-2297 Access token stored in plain text by Jenkins SMS Notification Plugin
- CVE-2020-2296 CSRF vulnerability in Jenkins Shared Objects Plugin
- CVE-2020-2295 CSRF vulnerability in Jenkins Maven Cascade Release Plugin
- CVE-2020-2294 Missing permission checks in Jenkins Maven Cascade Release Plugin
- CVE-2020-22937 Code injection in phome:empirecms