Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 137 of 215.
- CVE-2020-2012 PAN-OS: Panorama: XML external entity reference ('XXE') vulnerability leads the to information leak
- CVE-2020-20118 Memory corruption in avast:antivirus
- CVE-2020-2011 PAN-OS: Panorama registration denial of service
- CVE-2020-2010 PAN-OS: Authenticated user command injection vulnerability
- CVE-2020-20096 Other in whatsapp:whatsapp
- CVE-2020-20095 Other in apple:imessage
- CVE-2020-20094 Other in facebook:instagram
- CVE-2020-20093 Other in facebook:messenger
- CVE-2020-20092 File upload in articlecms project:articlecms
- CVE-2020-2009 PAN-OS: Panorama SD WAN arbitrary file creation
- CVE-2020-2008 PAN-OS: OS command injection or arbitrary file deletion vulnerability
- CVE-2020-20070 Cross-site scripting in diaowen:dwsurvey
- CVE-2020-2007 PAN-OS: OS command injection in management server
- CVE-2020-20067 File upload in ebcms:ebcms
- CVE-2020-2006 PAN-OS: Buffer overflow in management server payload parser
- CVE-2020-2005 PAN-OS: GlobalProtect Clientless VPN session hijacking
- CVE-2020-2004 GlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs
- CVE-2020-2003 PAN-OS: Authenticated administrator can delete arbitrary system file
- CVE-2020-20021 Denial of service in mikrotik:routeros
- CVE-2020-2002 PAN-OS: Spoofed Kerberos key distribution center authentication bypass
- CVE-2020-20012 Path traversal in sudytech:webplus pro
- CVE-2020-2001 PAN-OS: Panorama External control of file vulnerability leads to privilege escalation
- CVE-2020-2000 PAN-OS: OS command injection and memory corruption vulnerability
- CVE-2020-1999 PAN-OS: Threat signatures are evaded by specifically crafted packets
- CVE-2020-1998 PAN-OS: Improper SAML SSO authorization of shared local users
- CVE-2020-1997 PAN-OS: GlobalProtect registration open redirect
- CVE-2020-19964 Cross-site request forgery in phpmywind:phpmywind
- CVE-2020-19962 Cross-site scripting in chaoji cms project:chaoji cms
- CVE-2020-19961 SQL injection in zzcms:zzcms
- CVE-2020-19960 SQL injection in zzcms:zzcms
- CVE-2020-1996 PAN-OS: Panorama management server log injection
- CVE-2020-19959 SQL injection in zzcms:zzcms
- CVE-2020-19957 SQL injection in zzcms:zzcms
- CVE-2020-19954 XML external entity in s-cms:s-cms
- CVE-2020-19952 Cross-site scripting in jbt:live \(github-flavored\) markdown editor
- CVE-2020-19951 Cross-site request forgery in yzmcms:yzmcms
- CVE-2020-19950 Cross-site scripting in yzmcms:yzmcms
- CVE-2020-1995 PAN-OS: Management server rasmgr denial of service
- CVE-2020-19949 Cross-site scripting in yzmcms:yzmcms
- CVE-2020-19947 Cross-site scripting in markdown edit project:markdown edit
- CVE-2020-1994 PAN-OS: Predictable temporary file vulnerability
- CVE-2020-1993 PAN-OS: GlobalProtect Portal PHP session fixation vulnerability
- CVE-2020-19924 Cross-site scripting in issuehunt:boostnote
- CVE-2020-1992 PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalation
- CVE-2020-19915 Cross-site scripting in wuzhicms:wuzhicms
- CVE-2020-19914 Cross-site scripting in xiuno:xiunobbs
- CVE-2020-1991 Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows
- CVE-2020-19909 Integer overflow in haxx:curl
- CVE-2020-19907 Command injection in mitre:caldera
- CVE-2020-19902 Path traversal in wcms:wcms
- CVE-2020-1990 PAN-OS: Buffer overflow in the management server
- CVE-2020-19897 Cross-site scripting in wuzhicms:wuzhicms
- CVE-2020-19896 Code injection in 1234n:minicms
- CVE-2020-19891 File upload in dbhcms project:dbhcms
- CVE-2020-19890 Path traversal in dbhcms project:dbhcms
- CVE-2020-1989 Global Protect Agent: Incorrect privilege assignment allows local privilege escalation
- CVE-2020-19889 Cross-site request forgery in dbhcms project:dbhcms
- CVE-2020-19888 Missing authorization in dbhcms project:dbhcms
- CVE-2020-19887 Cross-site scripting in dbhcms project:dbhcms
- CVE-2020-19886 Cross-site request forgery in dbhcms project:dbhcms
- CVE-2020-19885 Cross-site scripting in dbhcms project:dbhcms
- CVE-2020-19884 Cross-site scripting in dbhcms project:dbhcms
- CVE-2020-19883 Cross-site scripting in dbhcms project:dbhcms
- CVE-2020-19882 Cross-site scripting in dbhcms project:dbhcms
- CVE-2020-19881 Cross-site scripting in dbhcms project:dbhcms
- CVE-2020-19880 Cross-site scripting in dbhcms project:dbhcms
- CVE-2020-1988 Global Protect Agent: Local privilege escalation due to an unquoted search path vulnerability
- CVE-2020-19879 Cross-site scripting in dbhcms project:dbhcms
- CVE-2020-19878 Information disclosure in dbhcms project:dbhcms
- CVE-2020-19877 Path traversal in dbhcms project:dbhcms
- CVE-2020-1987 Global Protect Agent: VPN cookie local information disclosure
- CVE-2020-19861 Memory corruption in nlnetlabs:ldns
- CVE-2020-19860 Memory corruption in nlnetlabs:ldns
- CVE-2020-1986 Secdo: Local authenticated users can cause Windows system crash
- CVE-2020-19858 Path traversal in plutinosoft:platinum
- CVE-2020-19855 Cross-site scripting in phpwcms:phpwcms
- CVE-2020-19853 SQL injection in bluecms project:bluecms
- CVE-2020-19850 Directus API vulnerable to denial of service
- CVE-2020-1985 Secdo: Incorrect Default Permissions
- CVE-2020-1984 Secdo: Privilege escalation via hardcoded script path
- CVE-2020-1983 libslirp: use after free vulnerability cause a denial of service.
- CVE-2020-19825 Cross-site Scripting in kimai/kimai
- CVE-2020-19824 Race condition in mpv:mpv
- CVE-2020-19822 Code injection in zzcms:zzcms
- CVE-2020-19821 SQL injection in wdoyo:doyocms
- CVE-2020-1982 PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services
- CVE-2020-1981 PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation
- CVE-2020-19803 Cross-site request forgery in doyocms project:doyocms
- CVE-2020-19802 File upload in doyocms project:doyocms
- CVE-2020-1980 PAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commands
- CVE-2020-1979 PAN-OS: A format string vulnerability in PAN-OS log daemon (logd) on Panorama allows local privilege escalation
- CVE-2020-19786 File upload in cszcms:csz cms
- CVE-2020-1978 VM-Series on Microsoft Azure: Inadvertent collection of credentials in Tech support files on HA configured VMs
- CVE-2020-19778 Missing authorization in shopxo:shopxo
- CVE-2020-19770 Cross-site scripting in wuzhicms:wuzhicms
- CVE-2020-1977 Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.
- CVE-2020-19769 Business logic in rtb1 project:rtb1
- CVE-2020-19768 Business logic in tokensale project:tokensale
- CVE-2020-19767 Business logic in zeroxracer project:zeroxracer
- CVE-2020-19766 Business logic in tokenerc20 project:tokenerc20