Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 130 of 215.
- CVE-2020-22201 Code injection in phpcms:phpcms
- CVE-2020-22200 Path traversal in phpcms:phpcms
- CVE-2020-2220 Stored XSS vulnerability in Jenkins job build time trend
- CVE-2020-22199 SQL injection in phpcms:phpcms
- CVE-2020-22198 SQL injection in dedecms:dedecms
- CVE-2020-2219 Stored XSS vulnerability in Jenkins Link Column Plugin
- CVE-2020-22181 Cross-site scripting in samsung:sww-3400rw firmware
- CVE-2020-2218 Password stored in plain text by Jenkins HP ALM Quality Center Plugin
- CVE-2020-22176 Missing authorization in phpgurukul:hospital management system
- CVE-2020-22175 SQL injection in phpgurukul:hospital management system
- CVE-2020-22174 SQL injection in phpgurukul:hospital management system
- CVE-2020-22173 SQL injection in phpgurukul:hospital management system
- CVE-2020-22172 SQL injection in phpgurukul:hospital management system
- CVE-2020-22171 SQL injection in phpgurukul:hospital management system
- CVE-2020-22170 SQL injection in phpgurukul:hospital management system
- CVE-2020-2217 Reflected XSS in Jenkins Compatibility Action Storage Plugin
- CVE-2020-22169 SQL injection in phpgurukul:hospital management system
- CVE-2020-22168 SQL injection in phpgurukul:hospital management system
- CVE-2020-22167 Cross-site scripting in phpgurukul:hospital management system
- CVE-2020-22166 SQL injection in phpgurukul:hospital management system
- CVE-2020-22165 SQL injection in phpgurukul:hospital management system
- CVE-2020-22164 SQL injection in phpgurukul:hospital management system
- CVE-2020-2216 Missing permission checks in Zephyr for JIRA Test Management Plugin
- CVE-2020-22159 File upload in evertz:3080ipx firmware
- CVE-2020-22158 Cross-site scripting in mediakind:rx8200 firmware
- CVE-2020-22153 File upload in thedaylightstudio:fuel cms
- CVE-2020-22152 Cross-site scripting in thedaylightstudio:fuel cms
- CVE-2020-22151 File upload in thedaylightstudio:fuel cms
- CVE-2020-22150 Cross-site scripting in piwigo:piwigo
- CVE-2020-2215 CSRF vulnerability in Jenkins Zephyr for JIRA Test Management Plugin
- CVE-2020-22148 Cross-site scripting in piwigo:piwigo
- CVE-2020-2214 Content-Security-Policy protection for user content disabled by Jenkins ZAP Pipeline Plugin
- CVE-2020-2213 Credentials stored in plain text by Jenkins White Source Plugin
- CVE-2020-22124 Information disclosure in joyplus-cms project:joyplus-cms
- CVE-2020-22122 SQL injection in find a place ljcms project:find a place ljcms
- CVE-2020-22120 Code injection in txjia:imcat
- CVE-2020-2212 Secret stored in plain text by Jenkins GitHub Coverage Reporter Plugin
- CVE-2020-2211 RCE vulnerability in ElasticBox Jenkins Kubernetes CI/CD Plugin
- CVE-2020-2210 Passwords transmitted in plain text by Jenkins Stash Branch Parameter Plugin
- CVE-2020-2209 Password stored in plain text by Jenkins TestComplete support Plugin
- CVE-2020-22083 jsonpickle unsafe deserialization
- CVE-2020-2208 Secret stored in plain text by Jenkins Slack Upload Plugin
- CVE-2020-22079 Memory corruption in tendacn:ac10u firmware
- CVE-2020-2207 Reflected XSS vulnerability in Jenkins VncViewer Plugin
- CVE-2020-22061 Other in superantispyware:superantispyware
- CVE-2020-2206 Reflected XSS vulnerability in Jenkins VncRecorder Plugin
- CVE-2020-22057 Misconfiguration in evga:precision xoc
- CVE-2020-22056 Denial of service in ffmpeg:ffmpeg
- CVE-2020-22054 Denial of service in debian:debian linux
- CVE-2020-22051 Denial of service in ffmpeg:ffmpeg
- CVE-2020-2205 Stored XSS vulnerability in Jenkins VncRecorder Plugin
- CVE-2020-22049 Denial of service in debian:debian linux
- CVE-2020-22048 Denial of service in debian:debian linux
- CVE-2020-22046 Denial of service in debian:debian linux
- CVE-2020-22044 Denial of service in debian:debian linux
- CVE-2020-22043 Denial of service in ffmpeg:ffmpeg
- CVE-2020-22042 Denial of service in debian:debian linux
- CVE-2020-22041 Denial of service in debian:debian linux
- CVE-2020-22040 Denial of service in ffmpeg:ffmpeg
- CVE-2020-2204 Missing permission checks in Jenkins Fortify on Demand Plugin
- CVE-2020-22039 Denial of service in ffmpeg:ffmpeg
- CVE-2020-22038 Denial of service in ffmpeg:ffmpeg
- CVE-2020-22037 Denial of service in debian:debian linux
- CVE-2020-22036 Memory corruption in debian:debian linux
- CVE-2020-22035 Memory corruption in debian:debian linux
- CVE-2020-22034 Memory corruption in debian:debian linux
- CVE-2020-22033 Memory corruption in debian:debian linux
- CVE-2020-22032 Memory corruption in debian:debian linux
- CVE-2020-22031 Memory corruption in debian:debian linux
- CVE-2020-22030 Memory corruption in debian:debian linux
- CVE-2020-2203 CSRF vulnerability in Jenkins Fortify on Demand Plugin
- CVE-2020-22029 Memory corruption in debian:debian linux
- CVE-2020-22028 Memory corruption in debian:debian linux
- CVE-2020-22027 Memory corruption in debian:debian linux
- CVE-2020-22026 Memory corruption in debian:debian linux
- CVE-2020-22025 Memory corruption in debian:debian linux
- CVE-2020-22024 Memory corruption in ffmpeg:ffmpeg
- CVE-2020-22023 Memory corruption in debian:debian linux
- CVE-2020-22022 Memory corruption in debian:debian linux
- CVE-2020-22021 Memory corruption in debian:debian linux
- CVE-2020-22020 Memory corruption in debian:debian linux
- CVE-2020-2202 Users with Overall/Read access could enumerate credentials IDs in Jenkins Fortify on Demand Plugin
- CVE-2020-22019 Memory corruption in debian:debian linux
- CVE-2020-22017 Memory corruption in debian:debian linux
- CVE-2020-22016 Memory corruption in debian:debian linux
- CVE-2020-22015 Memory corruption in debian:debian linux
- CVE-2020-2201 Stored XSS vulnerability in Jenkins Sonargraph Integration Plugin
- CVE-2020-22007 Command injection in okerthai:g955v1 firmware
- CVE-2020-22002 Server-side request forgery in inim:smartliving 10100l firmware
- CVE-2020-22001 Auth bypass in homeautomation project:homeautomation
- CVE-2020-22000 Command injection in homeautomation project:homeautomation
- CVE-2020-2200 OS command injection vulnerability in Jenkins Play Framework Plugin
- CVE-2020-21999 Command injection in iwt:facesentry access control system firmware
- CVE-2020-21998 Open redirect in homeautomation project:homeautomation
- CVE-2020-21997 Missing authorization in smartwares:home easy firmware
- CVE-2020-21996 Missing authorization in ave:53ab-wbs firmware
- CVE-2020-21995 Hardcoded credentials in inim:smartliving 10100l firmware
- CVE-2020-21994 Information disclosure in ave:53ab-wbs firmware
- CVE-2020-21993 Cross-site scripting in wems:enterprise manager
- CVE-2020-21992 Command injection in inim:smartliving 10100l firmware