Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 129 of 215.
- CVE-2020-22607 Cross-site scripting in limesurvey:limesurvey
- CVE-2020-2260 Missing permission check in Perfecto Plugin
- CVE-2020-22597 Code injection in jerryscript:jerryscript
- CVE-2020-2259 Stored XSS vulnerability in computer-queue-plugin Plugin
- CVE-2020-2258 Incorrect permission check in Health Advisor by CloudBees Plugin
- CVE-2020-22570 Denial of service in memcached:memcached
- CVE-2020-2257 Stored XSS vulnerability in Validating String Parameter Plugin
- CVE-2020-2256 Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
- CVE-2020-22552 Denial of service in snap7 project:snap7
- CVE-2020-22550 Path traversal in veno file manager project:veno file manager
- CVE-2020-2255 Missing permission check in Blue Ocean Plugin
- CVE-2020-22540 Cross-site scripting in codologic:codoforum
- CVE-2020-2254 Path traversal vulnerability in Blue Ocean Plugin
- CVE-2020-22539 File upload in codologic:codoforum
- CVE-2020-22535 Missing authorization in pbootcms:pbootcms
- CVE-2020-22533 Cross-site scripting in easycorp:zentao
- CVE-2020-2253 Missing hostname validation in Email Extension Plugin
- CVE-2020-22524 Memory corruption in freeimage project:freeimage
- CVE-2020-2252 Improper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin
- CVE-2020-2251 Passwords transmitted in plain text by Jenkins ReadyAPI Functional Testing Plugin
- CVE-2020-2250 Passwords stored in plain text by Jenkins ReadyAPI Functional Testing Plugin
- CVE-2020-2249 Credentials stored in plain text by Jenkins tfs Plugin
- CVE-2020-22481 Cross-site scripting in hack:hfish
- CVE-2020-2248 Reflected XSS vulnerability in Jenkins JSGames Plugin
- CVE-2020-22475 Missing authorization in tasks:tasks
- CVE-2020-22474 Path traversal in weberp:weberp
- CVE-2020-2247 XXE vulnerability in Jenkins Klocwork Analysis Plugin
- CVE-2020-2246 Stored XSS vulnerability in Jenkins Valgrind Plugin
- CVE-2020-22453 Cross-site scripting in untis:webuntis
- CVE-2020-22452 phpmyadmin contains SQL Injection vulnerability
- CVE-2020-2245 XXE vulnerability in Jenkins Valgrind Plugin
- CVE-2020-2244 XSS vulnerability in Jenkins Build Failure Analyzer Plugin
- CVE-2020-2243 Stored XSS vulnerability in Jenkins Cadence vManager Plugin
- CVE-2020-22429 Use after free in redox-os:redox
- CVE-2020-22428 Cross-site scripting in solarwinds:serv-u ftp server
- CVE-2020-22427 Command injection in nagios:nagios xi
- CVE-2020-22425 SQL injection in centreon:centreon
- CVE-2020-22421 Cross-site scripting in 74cms:74cms
- CVE-2020-2242 Missing permission checks in Jenkins Database Plugin
- CVE-2020-2241 CSRF vulnerability in Jenkins Database Plugin
- CVE-2020-22403 Cross-Site Request Forgery in express-cart
- CVE-2020-22402 Cross-site scripting in alinto:sogo web mail
- CVE-2020-2240 CSRF vulnerability in Jenkins Database Plugin
- CVE-2020-22394 Cross-site scripting in yzmcms:yzmcms
- CVE-2020-22392 Cross Site Scripting in Subrion CMS
- CVE-2020-22390 Code injection in akaunting:akaunting
- CVE-2020-2239 Secret stored in plain text by Jenkins Parameterized Remote Trigger Plugin
- CVE-2020-2238 Stored XSS vulnerability in Jenkins Git Parameter Plugin
- CVE-2020-2237 CSRF vulnerability in Jenkins Flaky Test Handler Plugin
- CVE-2020-2236 Stored XSS vulnerability in Jenkins Yet Another Build Visualizer Plugin
- CVE-2020-22352 Null dereference in gpac:gpac
- CVE-2020-2235 CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
- CVE-2020-22345 OS Command Injection in Centreon
- CVE-2020-2234 Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
- CVE-2020-22336 Memory corruption in pdfcrack project:pdfcrack
- CVE-2020-22334 Cross-site request forgery in beescms:beescms
- CVE-2020-22330 Subrion Cross-Site Scripting (XSS) vulnerability
- CVE-2020-2233 Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs
- CVE-2020-22327 Cross-site scripting in hfish project:hfish
- CVE-2020-2232 Jenkins Email Extension Plugin SMTP password transmitted and displayed in plain text
- CVE-2020-22312 Cross-site scripting in hznuoj project:hznuoj
- CVE-2020-2231 Improper Neutralization of Input During Web Page Generation in Jenkins
- CVE-2020-2230 Jenkins Cross-site Scripting vulnerability in project naming strategy
- CVE-2020-2229 Jenkins Cross-Site Scripting vulnerability in help icons
- CVE-2020-22284 Memory corruption in lwip project:lwip
- CVE-2020-22283 Memory corruption in lwip project:lwip
- CVE-2020-2228 Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin
- CVE-2020-22278 Code injection in phpmyadmin:phpmyadmin
- CVE-2020-22277 Code injection in codection:import and export users and customers
- CVE-2020-22276 Code injection in weformspro:weforms
- CVE-2020-22275 Code injection in easyregistrationforms:easy registration forms
- CVE-2020-22274 Code injection in jomsocial:jomsocial
- CVE-2020-22273 Cross-site request forgery in creativeitem:neoflex video subscription system
- CVE-2020-2227 Stored XSS vulnerability in Jenkins Deployer Framework Plugin
- CVE-2020-2226 Stored XSS vulnerability in Jenkins Matrix Authorization Strategy Plugin
- CVE-2020-22253 Misconfiguration in xiongmaitech:ahb7008t-mh-v2 firmware
- CVE-2020-22251 Cross-site scripting in phplist:phplist
- CVE-2020-2225 Stored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project Plugin
- CVE-2020-22249 File upload in phplist:phplist
- CVE-2020-2224 Stored XSS vulnerability in single axis builds tooltips in Jenkins Matrix Project Plugin
- CVE-2020-2223 Stored XSS vulnerability in Jenkins console links
- CVE-2020-22226 SQL injection in phpjabbers:fundraising script
- CVE-2020-22225 SQL injection in phpjabbers:fundraising script
- CVE-2020-22224 Cross-site scripting in phpjabbers:fundraising script
- CVE-2020-22223 SQL injection in phpjabbers:fundraising script
- CVE-2020-22222 Cross-site scripting in phpjabbers:fundraising script
- CVE-2020-2222 Stored XSS vulnerability in Jenkins 'keep forever' badge icon
- CVE-2020-22219 Memory corruption in flac project:flac
- CVE-2020-22218 Memory corruption in libssh2:libssh2
- CVE-2020-22217 Memory corruption in c-ares:c-ares
- CVE-2020-22212 SQL injection in 74cms:74cms
- CVE-2020-22211 SQL injection in 74cms:74cms
- CVE-2020-22210 SQL injection in 74cms:74cms
- CVE-2020-2221 Stored XSS vulnerability in Jenkins upstream cause
- CVE-2020-22209 SQL injection in 74cms:74cms
- CVE-2020-22208 SQL injection in 74cms:74cms
- CVE-2020-22206 SQL injection in shopex:ecshop
- CVE-2020-22205 SQL injection in shopex:ecshop
- CVE-2020-22204 SQL injection in shopex:ecshop
- CVE-2020-22203 SQL injection in phpcms:phpcms