Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 136 of 215.
- CVE-2020-2039 PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload
- CVE-2020-20389 Cross-site scripting in get-simple:getsimplecms
- CVE-2020-2038 PAN-OS: OS command injection vulnerability in the management web interface
- CVE-2020-2037 PAN-OS: OS command injection vulnerability in the management web interface
- CVE-2020-20363 Cross-site scripting in pbootcms:pbootcms
- CVE-2020-2036 PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface
- CVE-2020-2035 PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions
- CVE-2020-20349 Cross-site scripting in wtcms project:wtcms
- CVE-2020-20348 Cross-site scripting in wtcms project:wtcms
- CVE-2020-20347 Cross-site scripting in wtcms project:wtcms
- CVE-2020-20345 Cross-site scripting in wtcms project:wtcms
- CVE-2020-20344 Cross-site scripting in wtcms project:wtcms
- CVE-2020-20343 Cross-site request forgery in wtcms project:wtcms
- CVE-2020-20341 Server-side request forgery in yzmcms:yzmcms
- CVE-2020-20340 SQL injection in s-cms:s-cms
- CVE-2020-2034 PAN-OS: OS command injection vulnerability in GlobalProtect portal
- CVE-2020-20335 Memory corruption in kilo project:kilo
- CVE-2020-2033 GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie
- CVE-2020-2032 GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade
- CVE-2020-2031 PAN-OS: Integer underflow in the management interface
- CVE-2020-20300 SQL injection in weiphp:weiphp
- CVE-2020-2030 PAN-OS: OS command injection vulnerability in the management interface
- CVE-2020-20299 Missing authorization in weiphp:weiphp
- CVE-2020-20298 Code injection in zzzcms:zzzphp
- CVE-2020-20296 SQL injection in cmswing:cmswing
- CVE-2020-20295 SQL injection in cmswing:cmswing
- CVE-2020-20294 Command injection in cmswing:cmswing
- CVE-2020-20290 Path traversal in yccms:yccms
- CVE-2020-2029 PAN-OS: OS command injection vulnerability in management interface certificate generator
- CVE-2020-20289 SQL injection in yccms:yccms
- CVE-2020-20287 File upload in yccms:yccms
- CVE-2020-20285 Cross-site scripting in zzcms:zzcms
- CVE-2020-2028 PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification
- CVE-2020-20277 Path traversal in troglobit:uftpd
- CVE-2020-20276 Memory corruption in troglobit:uftpd
- CVE-2020-2027 PAN-OS: Buffer overflow in authd authentication response
- CVE-2020-20269 Cross-site scripting in caret:caret
- CVE-2020-20267 Memory corruption in mikrotik:routeros
- CVE-2020-20266 Null dereference in mikrotik:routeros
- CVE-2020-20265 Memory corruption in mikrotik:routeros
- CVE-2020-20264 Denial of service in mikrotik:routeros
- CVE-2020-20262 Denial of service in mikrotik:routeros
- CVE-2020-2026 Kata Containers - Guests can trick the kata-runtime into mounting the container image on any host path
- CVE-2020-20254 Null dereference in mikrotik:routeros
- CVE-2020-20253 Denial of service in mikrotik:routeros
- CVE-2020-20252 Null dereference in mikrotik:routeros
- CVE-2020-20250 Null dereference in mikrotik:routeros
- CVE-2020-2025 Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file
- CVE-2020-20249 Memory corruption in mikrotik:routeros
- CVE-2020-20248 Denial of service in mikrotik:routeros
- CVE-2020-20247 Memory corruption in mikrotik:routeros
- CVE-2020-20246 Memory corruption in mikrotik:routeros
- CVE-2020-20245 Memory corruption in mikrotik:routeros
- CVE-2020-2024 Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host
- CVE-2020-20237 Memory corruption in mikrotik:routeros
- CVE-2020-20236 Memory corruption in mikrotik:routeros
- CVE-2020-20231 Null dereference in mikrotik:routeros
- CVE-2020-20230 Denial of service in mikrotik:routeros
- CVE-2020-2023 Kata Containers - Containers have access to the guest root filesystem device
- CVE-2020-20227 Memory corruption in mikrotik:routeros
- CVE-2020-20225 Denial of service in mikrotik:routeros
- CVE-2020-20222 Null dereference in mikrotik:routeros
- CVE-2020-20221 Denial of service in mikrotik:routeros
- CVE-2020-20220 Null dereference in mikrotik:routeros
- CVE-2020-2022 PAN-OS: Panorama session disclosure during context switch into managed device
- CVE-2020-20219 Null dereference in mikrotik:routeros
- CVE-2020-20218 Memory corruption in mikrotik:routeros
- CVE-2020-20217 Denial of service in mikrotik:routeros
- CVE-2020-20216 Null dereference in mikrotik:routeros
- CVE-2020-20215 Memory corruption in mikrotik:routeros
- CVE-2020-20214 Denial of service in mikrotik:routeros
- CVE-2020-20213 Denial of service in mikrotik:routeros
- CVE-2020-20212 Null dereference in mikrotik:routeros
- CVE-2020-20211 Denial of service in mikrotik:routeros
- CVE-2020-20210 File upload in bludit:bludit
- CVE-2020-2021 Palo Alto Networks PAN-OS Authentication Bypass
- CVE-2020-2020 Cortex XDR Agent: Exceptional condition denial-of-service (DoS)
- CVE-2020-20189 SQL injection in newpk project:newpk
- CVE-2020-20184 Command injection in liftoffsoftware:gateone
- CVE-2020-20183 Missing authorization in zyxel:p1302-t10 v3 firmware
- CVE-2020-2018 PAN-OS: Panorama authentication bypass vulnerability
- CVE-2020-20178 Denial of service in whohas project:whohas
- CVE-2020-2017 PAN-OS: DOM-Based cross site scripting vulnerability in management web interface
- CVE-2020-2016 PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation
- CVE-2020-2015 PAN-OS: Buffer overflow in the management server
- CVE-2020-20142 Cross-site scripting in flexmonster:pivot table \& charts
- CVE-2020-20141 Cross-site scripting in flexmonster:pivot table \& charts
- CVE-2020-20140 Cross-site scripting in flexmonster:pivot table \& charts
- CVE-2020-2014 PAN-OS: OS injection vulnerability in PAN-OS management server
- CVE-2020-20139 Cross-site scripting in flexmonster:pivot table \& charts
- CVE-2020-20138 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2020-20136 QuantConnect Lean vulnerable to insecure deserialization
- CVE-2020-20131 Cross-site scripting in laracms project:laracms
- CVE-2020-2013 PAN-OS: Panorama context switch session cookie disclosure
- CVE-2020-20129 Cross-site Scripting in LaraCMS
- CVE-2020-20128 Information disclosure in laracms project:laracms
- CVE-2020-20125 Cross-site scripting in earclink:espcms-p8
- CVE-2020-20124 Code injection in wuzhicms:wuzhicms
- CVE-2020-20122 SQL injection in wuzhicms:wuzhicms
- CVE-2020-20120 SQL Injection in topthink/thinkphp