Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 131 of 215.
- CVE-2020-21991 Auth bypass in ave:53ab-wbs firmware
- CVE-2020-21990 Missing authorization in domoticz:mydomoathome
- CVE-2020-2199 XSS vulnerability in Jenkins Subversion Partial Release Manager Plugin
- CVE-2020-21989 Cross-site request forgery in homeautomation project:homeautomation
- CVE-2020-21987 Cross-site scripting in homeautomation project:homeautomation
- CVE-2020-2198 Missing permission check in Jenkins Project Inheritance Plugin
- CVE-2020-21976 File upload in newsone cms project:newsone cms
- CVE-2020-2197 Missing permission check in Jenkins Project Inheritance Plugin
- CVE-2020-21967 File upload in prestashop:prestashop
- CVE-2020-2196 Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection
- CVE-2020-2195 Stored XSS vulnerability in Jenkins Compact Columns Plugin
- CVE-2020-2194 Stored XSS vulnerability in Jenkins ECharts API Plugin
- CVE-2020-21937 Command injection in motorola:cx2 firmware
- CVE-2020-21936 Missing authorization in motorola:cx2 firmware
- CVE-2020-21935 Command injection in motorola:cx2 firmware
- CVE-2020-21934 Auth bypass in motorola:cx2 firmware
- CVE-2020-21933 Information disclosure in motorola:cx2 firmware
- CVE-2020-21932 Auth bypass in motorola:cx2 firmware
- CVE-2020-21930 Cross-site scripting in eyoucms:eyoucms
- CVE-2020-2193 Stored XSS vulnerability in Jenkins ECharts API Plugin
- CVE-2020-21929 Cross-site scripting in eyoucms:eyoucms
- CVE-2020-2192 CSRF vulnerability in Jenkins Swarm Plugin
- CVE-2020-21913 Use after free in debian:debian linux
- CVE-2020-2191 Improper permission checks in Jenkins Swarm Plugin
- CVE-2020-2190 Improper Neutralization of Input During Web Page Generation in Jenkins Script Security Plugin
- CVE-2020-21896 Use after free in artifex:mupdf
- CVE-2020-21890 Memory corruption in artifex:ghostscript
- CVE-2020-2189 RCE vulnerability in SCM Filter Jervis Plugin
- CVE-2020-21884 Cross-site request forgery in indionetworks:unibox u1000 firmware
- CVE-2020-21883 Command injection in indionetworks:unibox u1000 firmware
- CVE-2020-21881 Cross-site request forgery in duxcms project:duxcms
- CVE-2020-2188 Users with Overall/Read access can enumerate credentials IDs in Amazon EC2 Plugin
- CVE-2020-2187 Lack of SSL/TLS certificate and hostname validation in Amazon EC2 Plugin
- CVE-2020-21865 Code injection in thinkphp50-cms project:thinkphp50-cms
- CVE-2020-21862 Path traversal in duxcms project:duxcms
- CVE-2020-21861 File upload in duxcms project:duxcms
- CVE-2020-2186 CSRF vulnerability in Amazon EC2 Plugin
- CVE-2020-21854 Cross-site scripting in tidesec:wdscanner
- CVE-2020-2185 Missing SSH host key validation in Jenkins Amazon EC2 Plugin
- CVE-2020-21845 Cross-site scripting in codoforum:codoforum
- CVE-2020-21844 Memory corruption in gnu:libredwg
- CVE-2020-21843 Memory corruption in gnu:libredwg
- CVE-2020-21842 Memory corruption in gnu:libredwg
- CVE-2020-21841 Memory corruption in gnu:libredwg
- CVE-2020-21840 Memory corruption in gnu:libredwg
- CVE-2020-2184 CSRF vulnerability in Jenkins CVS Plugin
- CVE-2020-21839 Denial of service in gnu:libredwg
- CVE-2020-21838 Memory corruption in gnu:libredwg
- CVE-2020-21836 Memory corruption in gnu:libredwg
- CVE-2020-21835 Null dereference in gnu:libredwg
- CVE-2020-21834 Null dereference in gnu:libredwg
- CVE-2020-21833 Memory corruption in gnu:libredwg
- CVE-2020-21832 Memory corruption in gnu:libredwg
- CVE-2020-21831 Memory corruption in gnu:libredwg
- CVE-2020-21830 Memory corruption in gnu:libredwg
- CVE-2020-2183 Improper permission checks in Jenkins Copy Artifact Plugin
- CVE-2020-21827 Memory corruption in gnu:libredwg
- CVE-2020-2182 Improper masking of some secrets in Jenkins Credentials Binding Plugin
- CVE-2020-21819 Memory corruption in gnu:libredwg
- CVE-2020-21818 Memory corruption in gnu:libredwg
- CVE-2020-21817 Null dereference in gnu:libredwg
- CVE-2020-21816 Memory corruption in gnu:libredwg
- CVE-2020-21815 Null dereference in gnu:libredwg
- CVE-2020-21814 Memory corruption in gnu:libredwg
- CVE-2020-21813 Memory corruption in gnu:libredwg
- CVE-2020-2181 Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps
- CVE-2020-21809 NukeViet SQL Injection vulnerability
- CVE-2020-21808 NukeViet SQL Injection vulnerability via topicsid parameter
- CVE-2020-21806 SQL injection in ectouch:ectouch
- CVE-2020-2180 RCE vulnerability in Jenkins AWS SAM Plugin
- CVE-2020-2179 RCE vulnerability in Jenkins Yaml Axis Plugin
- CVE-2020-21788 Server-side request forgery in crmeb:crmeb
- CVE-2020-21787 File upload in crmeb:crmeb
- CVE-2020-21786 Path traversal in ibos:ibos
- CVE-2020-21785 Command injection in ibos:ibos
- CVE-2020-21784 Code injection in phpwcms:phpwcms
- CVE-2020-21783 Cross-site scripting in ibos:ibos
- CVE-2020-2178 XXE vulnerability in Jenkins Parasoft Findings Plugin
- CVE-2020-2177 Credentials stored in plain text by Jenkins Copr Plugin
- CVE-2020-2176 XSS vulnerability in Jenkins useMango Runner Plugin
- CVE-2020-2175 Stored XSS vulnerability in Jenkins FitNesse Plugin
- CVE-2020-2174 Reflected XSS vulnerability in Jenkins AWSEB Deployment Plugin
- CVE-2020-21733 Cross-site scripting in sagemcom:f\@st 3686 firmware
- CVE-2020-21732 Cross-site scripting in rukovoditel:rukovoditel
- CVE-2020-21731 Cross-site scripting in gazie project:gazie
- CVE-2020-2173 XSS vulnerability in Jenkins Gatling Plugin
- CVE-2020-21729 Cross-site scripting in jeecms:jeecms x
- CVE-2020-21726 SQL injection in opensns:opensns
- CVE-2020-21725 SQL injection in opensns:opensns
- CVE-2020-21724 Memory corruption in ogg video tools project:ogg video tools
- CVE-2020-21723 Memory corruption in ogg video tools project:ogg video tools
- CVE-2020-21722 Memory corruption in ogg video tools project:ogg video tools
- CVE-2020-2172 XXE vulnerability in Jenkins Code Coverage API Plugin
- CVE-2020-21710 Denial of service in artifex:ghostscript
- CVE-2020-2171 XXE vulnerability in Jenkins RapidDeploy Plugin
- CVE-2020-2170 Stored XSS vulnerability in Jenkins RapidDeploy Plugin
- CVE-2020-21699 Integer overflow in alibaba:tengine
- CVE-2020-21697 Use after free in debian:debian linux
- CVE-2020-2169 Reflected XSS vulnerability in Jenkins Queue cleanup Plugin
- CVE-2020-21688 Use after free in debian:debian linux