Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 134 of 215.
- CVE-2020-21133 SQL injection in metinfo:metinfo
- CVE-2020-21132 SQL injection in metinfo:metinfo
- CVE-2020-21131 SQL injection in metinfo:metinfo
- CVE-2020-21130 Cross-site scripting in hisiphp:hisiphp
- CVE-2020-2113 Jenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS)
- CVE-2020-21127 SQL injection in metinfo:metinfo
- CVE-2020-21126 Cross-site request forgery in metinfo:metinfo
- CVE-2020-21125 Remote code execution in UReport
- CVE-2020-21124 Missing authorization in ureport project:ureport
- CVE-2020-21122 Server-Side Request Forgery in UReport
- CVE-2020-21121 SQL injection in kliqqi:kliqqi cms
- CVE-2020-21120 SQL injection in uqcms:uqcms
- CVE-2020-2112 Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)
- CVE-2020-21119 SQL injection in kliqqi:kliqqi cms
- CVE-2020-2111 Subversion Plugin stored XSS vulnerability
- CVE-2020-21101 Cross-site scripting in screenly:screenly
- CVE-2020-2110 Improper Input Validation in Jenkins Script Security Plugin
- CVE-2020-2109 Improper Input Validation in Jenkins Pipeline: Groovy Plugin
- CVE-2020-21088 Cross-site scripting in x2engine:x2crm
- CVE-2020-21087 Cross-site scripting in x2engine:x2crm
- CVE-2020-21082 Cross-site scripting in maccms:maccms
- CVE-2020-21081 Cross-site request forgery in maccms:maccms
- CVE-2020-2108 XXE vulnerability in Jenkins WebSphere Deployer Plugin
- CVE-2020-2107 Fortify Plugin stored credentials in plain text
- CVE-2020-21066 Memory corruption in axiosys:bento4
- CVE-2020-21060 SQL injection in phpmywind:phpmywind
- CVE-2020-2106 Stored XSS vulnerability in Code Coverage API Plugin
- CVE-2020-21058 Cross-site scripting in typora:typora
- CVE-2020-21057 Path traversal in fusionpbx:fusionpbx
- CVE-2020-21056 Path traversal in fusionpbx:fusionpbx
- CVE-2020-21055 Path traversal in fusionpbx:fusionpbx
- CVE-2020-21054 Cross-site scripting in fusionpbx:fusionpbx
- CVE-2020-21053 Cross-site scripting in fusionpbx:fusionpbx
- CVE-2020-21052 Cross-site scripting in zrlog:zrlog
- CVE-2020-21050 Memory corruption in saitoha:libsixel
- CVE-2020-2105 Jenkins REST APIs vulnerable to clickjacking
- CVE-2020-21049 Memory corruption in saitoha:libsixel
- CVE-2020-21048 Denial of service in saitoha:libsixel
- CVE-2020-21047 Memory corruption in elfutils project:elfutils
- CVE-2020-21046 Privilege escalation in softonic:eagleget
- CVE-2020-21041 Memory corruption in debian:debian linux
- CVE-2020-2104 Memory usage graphs accessible to anyone with Overall/Read
- CVE-2020-21038 Open redirect in typecho:typecho
- CVE-2020-2103 Jenkins Diagnostic page exposed session cookies
- CVE-2020-2102 Non-constant time HMAC comparison
- CVE-2020-21016 Code injection in dlink:dir-846 firmware
- CVE-2020-21014 Path traversal in emlog:emlog
- CVE-2020-21013 SQL injection in emlog:emlog
- CVE-2020-21012 SQL injection in nikhil-bhalerao:hotel and lodge management system
- CVE-2020-2101 Non-constant time comparison of inbound TCP agent connection secret
- CVE-2020-21005 File upload in wellcms:wellcms
- CVE-2020-21003 Cross-site scripting in pbootcms:pbootcms
- CVE-2020-2100 Jenkins vulnerable to UDP amplification reflection attack
- CVE-2020-20990 Cross-site scripting in domainmod:domainmod
- CVE-2020-2099 Inbound TCP Agent Protocol/3 authentication bypass in Jenkins
- CVE-2020-20989 Cross-site request forgery in domainmod:domainmod
- CVE-2020-20988 Cross-site scripting in domainmod:domainmod
- CVE-2020-20982 Cross-site scripting in wdja:wdja cms
- CVE-2020-20981 SQL injection in metinfo:metinfo
- CVE-2020-2098 CSRF vulnerability in Jenkins Sounds Plugin allow OS command execution
- CVE-2020-20979 File upload in 8cms:ljcms
- CVE-2020-20977 Cross-site scripting in ukcms:ukcms
- CVE-2020-20975 SQL injection in gxlcms:gxlcms
- CVE-2020-20971 Cross-site request forgery in pbootcms:pbootcms
- CVE-2020-2097 Missing permission checks in Jenkins Sounds Plugin allow OS command execution
- CVE-2020-20969 File upload in pluck-cms:pluck
- CVE-2020-2096 Reflected XSS vulnerability in Jenkins gitlab-hook Plugin
- CVE-2020-20951 Command injection in pluck-cms:pluck
- CVE-2020-20950 Weak cryptography in ietf:public key cryptography standards \#1
- CVE-2020-2095 Redgate SQL Change Automation Plugin stored credentials in plain text
- CVE-2020-20949 Weak cryptography in ietf:public key cryptography standards \#1
- CVE-2020-20948 Path traversal in jeecg:jeecg
- CVE-2020-20946 Cross-site scripting in qibosoft:qibosoft
- CVE-2020-20945 Cross-site request forgery in qibosoft:qibosoft
- CVE-2020-20944 Path traversal in qibosoft:qibosoft
- CVE-2020-20943 Cross-site request forgery in qibosoft:qibosoft
- CVE-2020-2094 Missing permission checks in Health Advisor by CloudBees Plugin
- CVE-2020-2093 CSRF vulnerability in Health Advisor by CloudBees Plugin
- CVE-2020-2092 XXE vulnerability in Jenkins Robot Framework Plugin
- CVE-2020-20919 File upload in pluck-cms:pluck
- CVE-2020-20918 Code injection in pluck-cms:pluck
- CVE-2020-20915 SQL injection in publiccms:publiccms
- CVE-2020-20914 SQL injection in publiccms:publiccms
- CVE-2020-20913 Ming-Soft MCMS vulnerable to SQL injection
- CVE-2020-2091 Missing permission checks in Jenkins Amazon EC2 Plugin
- CVE-2020-20908 Cross-site scripting in akaunting:akaunting
- CVE-2020-20907 Path traversal in metinfo:metinfo
- CVE-2020-20902 Memory corruption in ffmpeg:ffmpeg
- CVE-2020-2090 CSRF vulnerability in Jenkins Amazon EC2 Plugin
- CVE-2020-20898 Integer overflow in ffmpeg:ffmpeg
- CVE-2020-20896 Null dereference in ffmpeg:ffmpeg
- CVE-2020-20892 Denial of service in ffmpeg:ffmpeg
- CVE-2020-20891 Memory corruption in ffmpeg:ffmpeg
- CVE-2020-20813 Denial of service in openvpn:openvpn
- CVE-2020-20808 Cross-site scripting in qibosoft:qibosoft
- CVE-2020-20800 SQL injection in metinfo:metinfo
- CVE-2020-20799 Cross-site scripting in jeecms:jeecms
- CVE-2020-20797 SQL injection in flamecms project:flamecms
- CVE-2020-20796 SQL injection in flamecms project:flamecms
- CVE-2020-20781 Cross-site scripting in ucms project:ucms