Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 133 of 215.
- CVE-2020-2149 Credentials transmitted in plain text by Repository Connector Plugin
- CVE-2020-21489 Liufee CMS File Upload vulnerability
- CVE-2020-21487 Cross-site scripting in netgate:pfsense
- CVE-2020-21486 SQL injection in phpok:phpok
- CVE-2020-21485 Alluxio Cross Site Scripting vulnerability
- CVE-2020-21483 File upload in jizhicms:jizhicms
- CVE-2020-21482 Cross-site scripting in rgcms project:rgcms
- CVE-2020-21481 File upload in rgcms project:rgcms
- CVE-2020-21480 File upload in rgcms project:rgcms
- CVE-2020-2148 Missing permission checks in Mac Plugin
- CVE-2020-21474 File upload in nucleuscms:nucleuscms
- CVE-2020-2147 CSRF vulnerability in Mac Plugin
- CVE-2020-21469 Denial of service in postgresql:postgresql
- CVE-2020-21468 Denial of service in redislabs:redis
- CVE-2020-2146 Missing SSH host key validation in Mac Plugin
- CVE-2020-21452 File upload in uniview:isc2500-s firmware
- CVE-2020-2145 Credentials stored in plain text by Zephyr Enterprise Test Management Plugin
- CVE-2020-2144 XXE vulnerability in Rundeck Plugin
- CVE-2020-21434 Cross-site scripting in maccms:maccms
- CVE-2020-21431 Path traversal in hongcms project:hongcms
- CVE-2020-2143 Credentials transmitted in plain text by Jenkins Logstash Plugin
- CVE-2020-21428 Memory corruption in freeimage project:freeimage
- CVE-2020-21427 Memory corruption in freeimage project:freeimage
- CVE-2020-21426 Memory corruption in freeimage project:freeimage
- CVE-2020-2142 Missing permission checks in Jenkins P4 Plugin
- CVE-2020-2141 CSRF vulnerability in Jenkins P4 Plugin
- CVE-2020-21406 Denial of service in rk max smart tv box project:rk max smart tv box firmware
- CVE-2020-21405 Other in h96tvbox:h96 pro plus firmware
- CVE-2020-21400 SQL injection in phpmywind:phpmywind
- CVE-2020-2140 XSS vulnerability in Jenkins Audit Trail Plugin
- CVE-2020-21394 SQL injection in crmeb:crmeb
- CVE-2020-2139 Arbitrary file write vulnerability in Jenkins Cobertura Plugin
- CVE-2020-21387 Cross-site scripting in maccms:maccms
- CVE-2020-21386 Cross-site request forgery in maccms:maccms
- CVE-2020-2138 XXE vulnerability in Jenkins Cobertura Plugin
- CVE-2020-21378 SQL injection in seacms:seacms
- CVE-2020-21377 SQL injection in yunyecms:yunyecms
- CVE-2020-2137 Stored XSS vulnerability in Jenkins Timestamper Plugin
- CVE-2020-21366 Cross-site request forgery in njtech:greencms
- CVE-2020-21365 Path traversal in debian:debian linux
- CVE-2020-21363 Path traversal in maccms:maccms
- CVE-2020-21362 Cross-site scripting in maccms:maccms
- CVE-2020-2136 Improper Neutralization of Input During Web Page Generation in Jenkins Git Plugin
- CVE-2020-21359 File upload in maccms:maccms
- CVE-2020-21358 Cross-site request forgery in wagecms project:wage-cms
- CVE-2020-21357 Cross-site scripting in popojicms:popojicms
- CVE-2020-21356 Information disclosure in popojicms:popojicms
- CVE-2020-21353 Cross-site scripting in get-simple:getsimplecms
- CVE-2020-2135 Sandbox bypass vulnerability in Script Security Plugin
- CVE-2020-21345 Cross-site scripting in halo:halo
- CVE-2020-21342 Missing authorization in zzcms:zzcms
- CVE-2020-2134 Sandbox bypass vulnerability in Script Security Plugin
- CVE-2020-21333 Cross-site scripting in publiccms:publiccms
- CVE-2020-2133 Password stored in plain text by Applatix Plugin
- CVE-2020-21325 File upload in wuzhicms:wuzhicms
- CVE-2020-21322 Arbitrary Code Execution in feehi/cms
- CVE-2020-21321 Cross-site request forgery in emlog:emlog
- CVE-2020-2132 Password stored in plain text by Parasoft Environment Manager Plugin
- CVE-2020-21316 Cross-site scripting in zrlog:zrlog
- CVE-2020-2131 Passwords stored in plain text by Harvest SCM Plugin
- CVE-2020-2130 Passwords stored in plain text by Harvest SCM Plugin
- CVE-2020-2129 Plaintext Storage of a Password in Jenkins Eagle Tester Plugin
- CVE-2020-2128 Password stored in plain text by ECX Copy Data Management Plugin
- CVE-2020-2127 Credential stored in plain text by BMC Release Package and Deployment Plugin
- CVE-2020-21268 Cross-site scripting in easycorp:zentao
- CVE-2020-21266 Cross-site scripting in broadleafcommerce:broadleaf commerce
- CVE-2020-2126 Token stored in plain text by DigitalOcean Plugin
- CVE-2020-21252 Cross-site request forgery in hongcms project:hongcms
- CVE-2020-21250 File upload in cszcms:csz cms
- CVE-2020-2125 Credentials stored in plain text by debian-package-builder Plugin
- CVE-2020-21246 YiiCMS Cross Site Scripting vulnerability
- CVE-2020-21244 Path traversal in frontaccounting:frontaccounting
- CVE-2020-2124 Password stored in plain text by Dynamic Extended Choice Parameter Plugin
- CVE-2020-21238 Auth bypass in chshcms:cscms
- CVE-2020-21237 Auth bypass in 8cms:ljcms
- CVE-2020-21236 Cross-site request forgery in damicms:damicms
- CVE-2020-2123 RCE vulnerability in RadarGun Plugin
- CVE-2020-21228 Cross-site scripting in jizhicms:jizhicms
- CVE-2020-21224 Command injection in inspur:clusterengine
- CVE-2020-2122 Stored XSS vulnerability in Jenkins brakeman Plugin
- CVE-2020-21219 Cross-site scripting in netgate:acme
- CVE-2020-2121 RCE vulnerability in Google Kubernetes Engine Plugin
- CVE-2020-2120 XXE vulnerability in FitNesse Plugin
- CVE-2020-2119 Client secret transmitted in plain text by Azure AD Plugin
- CVE-2020-21180 SQL injection in koa2-blog project:koa2-blog
- CVE-2020-2118 Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin
- CVE-2020-21179 SQL injection in koa2-blog project:koa2-blog
- CVE-2020-21176 SQL Injection in thinkjs
- CVE-2020-21174 liufee CMS File Upload vulnerability
- CVE-2020-2117 Missing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentials
- CVE-2020-21161 Cross-site scripting in ruckuswireless:zonedirector firmware
- CVE-2020-2116 CSRF vulnerability in Pipeline GitHub Notify Step Plugin allows capturing credentials
- CVE-2020-21152 SQL injection in inxedu:inxedu
- CVE-2020-2115 XXE vulnerability in NUnit Plugin
- CVE-2020-21147 Cross-site scripting in rockoa:rockoa
- CVE-2020-21146 Feehi CMS vulnerable to Cross-site Scripting in Username Field
- CVE-2020-21142 Cross-site scripting in ipfire:ipfire
- CVE-2020-21141 Cross-site request forgery in idreamsoft:icms
- CVE-2020-2114 Jenkins S3 Publisher Plugin transmits credentials in plain text during configuration
- CVE-2020-21139 Cross-site request forgery in ec cloud e-commerce system project:ec cloud e-commerce system