Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 128 of 215.
- CVE-2020-2293 Arbitrary file read vulnerability in Jenkins Persona Plugin
- CVE-2020-2292 Stored XSS vulnerability in Jenkins Release Plugin
- CVE-2020-22916 Denial of service in tukaani:xz
- CVE-2020-2291 Password stored in plain text by Jenkins couchdb-statistics Plugin
- CVE-2020-22907 Memory corruption in jsish:jsish
- CVE-2020-2290 Stored XSS vulnerability in Jenkins Active Choices Plugin
- CVE-2020-2289 Stored XSS vulnerability in Jenkins Active Choices Plugin
- CVE-2020-22886 Memory corruption in artifex:mujs
- CVE-2020-22885 Memory corruption in artifex:mujs
- CVE-2020-22884 Memory corruption in espruino:espruino
- CVE-2020-22882 Denial of service in moddable:moddable
- CVE-2020-2288 Incorrect default pattern in Jenkins Audit Trail Plugin
- CVE-2020-22876 Memory corruption in quickjs project:quickjs
- CVE-2020-22875 Integer overflow in jsish:jsish
- CVE-2020-22874 Integer overflow in jsish:jsish
- CVE-2020-22873 Memory corruption in jsish:jsish
- CVE-2020-2287 Request logging bypass in Jenkins Audit Trail Plugin
- CVE-2020-22864 Cross site scripting in froala-editor
- CVE-2020-2286 Improper authorization due to caching in Jenkins Role-based Authorization Strategy Plugin
- CVE-2020-2285 Missing permission check in Jenkins Liquibase Runner Plugin allows enumerating credentials IDs
- CVE-2020-22848 Code injection in chshcms:cscms
- CVE-2020-22845 Memory corruption in mikrotik:routeros
- CVE-2020-22844 Memory corruption in mikrotik:routeros
- CVE-2020-22842 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2020-22841 Cross-site scripting in b2evolution:b2evolution
- CVE-2020-22840 Open redirect in b2evolution:b2evolution
- CVE-2020-2284 XXE vulnerability in Jenkins Liquibase Runner Plugin
- CVE-2020-22839 Cross-site scripting in b2evolution:b2evolution cms
- CVE-2020-2283 Stored XSS vulnerability in Jenkins Liquibase Runner Plugin
- CVE-2020-22820 SQL injection in mkcms project:mkcms
- CVE-2020-2282 Missing permission check in Jenkins Implied Labels Plugin allows reconfiguring the plugin
- CVE-2020-22819 SQL injection in mkcms project:mkcms
- CVE-2020-22818 SQL injection in mkcms project:mkcms
- CVE-2020-2281 CSRF vulnerability in Jenkins Lockable Resources Plugin
- CVE-2020-22809 Privilege escalation in windscribe:windscribe
- CVE-2020-22808 Cross-site scripting in fecmall project:fecmall
- CVE-2020-22807 SQL injection in vtiger:vtiger crm
- CVE-2020-2280 CSRF vulnerability in Jenkins warnings Plugin allows remote code execution
- CVE-2020-22790 Cross-site scripting in safe:fme server
- CVE-2020-2279 Sandbox bypass vulnerability in Jenkins Script Security Plugin
- CVE-2020-22789 Cross-site scripting in safe:fme server
- CVE-2020-22785 Denial of service in etherpad:etherpad
- CVE-2020-22784 Security feature bypass in etherpad:ueberdb
- CVE-2020-22783 Information disclosure in etherpad:etherpad
- CVE-2020-22782 Denial of service in etherpad:etherpad
- CVE-2020-22781 Denial of service in etherpad:etherpad
- CVE-2020-2278 Arbitrary file write vulnerability in Jenkins Storable Configs Plugin
- CVE-2020-2277 Arbitrary file read vulnerability in Jenkins Storable Configs Plugin
- CVE-2020-22765 NukeViet Cross-site Scripting via the editor in the News module
- CVE-2020-22761 Cross-site request forgery in flatpress:flatpress
- CVE-2020-2276 System command execution vulnerability in Selection tasks Jenkins Plugin
- CVE-2020-22755 MCMS vulnerable to arbitrary code execution via crafted thumbnail
- CVE-2020-2275 Arbitrary file read vulnerability in Copy data to workspace Jenkins Plugin
- CVE-2020-22741 Weak cryptography in baidu:xuperchain
- CVE-2020-2274 Passwords stored in plain text by ElasTest Plugin
- CVE-2020-22732 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2020-2273 CSRF vulnerability in Jenkins ElasTest Plugin
- CVE-2020-22724 Command injection in mercury:mer1200 firmware
- CVE-2020-22723 Cross-site scripting in ljcmsshop project:ljcmsshop
- CVE-2020-22722 Privilege escalation in rapidscada:rapid scada
- CVE-2020-22721 File upload in pnotes.net project:pnotes.net
- CVE-2020-2272 Missing permission checks in Jenkins ElasTest Plugin
- CVE-2020-22719 Cross-site scripting in shimo:document
- CVE-2020-2271 Stored XSS vulnerability in Locked Files Report Plugin
- CVE-2020-2270 Stored XSS vulnerability in ClearCase Release Plugin
- CVE-2020-2269 Stored XSS vulnerability in chosen-views-tabbar Plugin
- CVE-2020-2268 CSRF vulnerability in MongoDB Plugin
- CVE-2020-22679 Denial of service in gpac:gpac
- CVE-2020-22678 Memory corruption in gpac:gpac
- CVE-2020-22677 Memory corruption in gpac:gpac
- CVE-2020-22675 Memory corruption in gpac:gpac
- CVE-2020-22674 Null dereference in gpac:gpac
- CVE-2020-22673 Denial of service in gpac:gpac
- CVE-2020-2267 Missing permission checks in MongoDB Plugin
- CVE-2020-22669 Security feature bypass in debian:debian linux
- CVE-2020-22662 Command injection in ruckuswireless:r310 firmware
- CVE-2020-22661 Missing authorization in ruckuswireless:r310 firmware
- CVE-2020-22660 Security feature bypass in ruckuswireless:r310 firmware
- CVE-2020-2266 Stored XSS vulnerability in Description Column Plugin
- CVE-2020-22659 Security feature bypass in ruckuswireless:r310 firmware
- CVE-2020-22658 Security feature bypass in ruckuswireless:r310 firmware
- CVE-2020-22657 Auth bypass in ruckuswireless:r310 firmware
- CVE-2020-22656 Security feature bypass in ruckuswireless:r310 firmware
- CVE-2020-22655 Missing authorization in ruckuswireless:r310 firmware
- CVE-2020-22654 Security feature bypass in ruckuswireless:r310 firmware
- CVE-2020-22653 Security feature bypass in ruckuswireless:r310 firmware
- CVE-2020-22650 Denial of service in att:alienvault ossim
- CVE-2020-2265 Stored XSS vulnerability in Coverage/Complexity Scatter Plot Plugin
- CVE-2020-22647 Information disclosure in smartconrtactgames project:smartconrtactgames
- CVE-2020-22643 Feehi CMS arbitrary file upload vulnerability
- CVE-2020-2264 Stored XSS vulnerability in Custom Job Icon Plugin
- CVE-2020-2263 Stored XSS vulnerability in Radiator View Plugin
- CVE-2020-22628 Memory corruption in libraw:libraw
- CVE-2020-22623 Path traversal in insightsoftware:jreport
- CVE-2020-2262 Stored XSS vulnerability in android-lint Plugin
- CVE-2020-22617 Use after free in ardour:ardour
- CVE-2020-22612 Code injection in mybb:mybb
- CVE-2020-2261 OS command execution vulnerability in Perfecto Plugin
- CVE-2020-22609 Cross-site scripting in enhancesoft:osticket
- CVE-2020-22608 Cross-site scripting in enhancesoft:osticket