Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 138 of 215.
- CVE-2020-19765 Race condition in proofofdiligencetoken project:proofofdiligencetoken
- CVE-2020-19762 Cross-site scripting in carrier:webctrl system
- CVE-2020-1976 GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability.
- CVE-2020-19752 Null dereference in fedoraproject:fedora
- CVE-2020-19751 Memory corruption in gpac:gpac
- CVE-2020-19750 Memory corruption in gpac:gpac
- CVE-2020-1975 Missing XML Validation in PAN-OS Web Interface
- CVE-2020-19726 Memory corruption in gnu:binutils
- CVE-2020-19725 Use after free in microsoft:z3
- CVE-2020-19724 Denial of service in gnu:binutils
- CVE-2020-19722 Null dereference in axiosys:bento4
- CVE-2020-19721 Memory corruption in axiosys:bento4
- CVE-2020-19720 Null dereference in axiosys:bento4
- CVE-2020-19719 Memory corruption in axiosys:bento4
- CVE-2020-19718 Null dereference in axiosys:bento4
- CVE-2020-19717 Null dereference in axiosys:bento4
- CVE-2020-19716 Memory corruption in debian:debian linux
- CVE-2020-1971 EDIPARTYNAME NULL pointer dereference
- CVE-2020-19709 Cross-site scripting in feehicms
- CVE-2020-19705 SQL injection in thinkphp-zcms project:thinkphp-zcms
- CVE-2020-19704 Cross-site scripting in spring-boot-admin project:spring-boot-admin
- CVE-2020-19703 Cross-site scripting in dzzoffice:dzzoffice
- CVE-2020-19699 Cross-site scripting in kiftd project:kiftd
- CVE-2020-19698 Pandao Editor.md vulnerable to cross-site scripting (XSS) in editor parameter
- CVE-2020-19697 Pandao Editor.md vulnerable to cross-site scripting (XSS) in iframe src parameter
- CVE-2020-19695 Memory corruption in f5:njs
- CVE-2020-19693 Memory corruption in espruino:espruino
- CVE-2020-19692 Memory corruption in f5:njs
- CVE-2020-19683 Cross-site scripting in zzzcms:zzzcms
- CVE-2020-19682 Cross-site request forgery in zzzcms:zzzcms
- CVE-2020-1968 Raccoon attack
- CVE-2020-19678 Path traversal in oisf:suricata
- CVE-2020-19676 Incorrect Access Control in Nacos
- CVE-2020-19672 File upload in niushop:niushop
- CVE-2020-19670 Auth bypass in niushop:niushop
- CVE-2020-1967 Segmentation fault in SSL_check_chain
- CVE-2020-19669 Cross-site request forgery in eyoucms:eyoucms
- CVE-2020-19668 Memory corruption in saitoha:libsixel
- CVE-2020-19667 Memory corruption in debian:debian linux
- CVE-2020-19664 Command injection in draytek:vigor2960 firmware
- CVE-2020-19660 Cross-site scripting in ipandao:editor.md
- CVE-2020-19643 Cross-site scripting in insma:wifi mini spy 1080p hd security ip camera firmware
- CVE-2020-19642 File upload in insma:wifi mini spy 1080p hd security ip camera firmware
- CVE-2020-19641 Privilege escalation in insma:wifi mini spy 1080p hd security ip camera firmware
- CVE-2020-19640 Missing authorization in insma:wifi mini spy 1080p hd security ip camera firmware
- CVE-2020-1964 Deserialization of Untrusted Data in Apache Heron
- CVE-2020-19639 Cross-site request forgery in insma:wifi mini spy 1080p hd security ip camera firmware
- CVE-2020-1963 File system access via H2 in Apache Ignite
- CVE-2020-19626 Craft CMS Cross-site Scripting Vulnerability
- CVE-2020-19625 Code injection in gridx project:gridx
- CVE-2020-19619 Cross-site scripting in mblog project:mblog
- CVE-2020-19618 Cross-site scripting in mblog project:mblog
- CVE-2020-19617 Cross-site scripting in mblog project:mblog
- CVE-2020-19616 Cross-site scripting in mblog project:mblog
- CVE-2020-19613 Server-side request forgery in flycms project:flycms
- CVE-2020-19611 Cross-site scripting in racktables project:racktables
- CVE-2020-1961 Injection in Apache Syncope
- CVE-2020-19609 Memory corruption in artifex:mupdf
- CVE-2020-1960 Command injection in Apache Flink
- CVE-2020-19596 Memory corruption in coreftp:core ftp
- CVE-2020-19595 Memory corruption in coreftp:core ftp
- CVE-2020-1959 Expression Language Injection in Apache Syncope
- CVE-2020-19587 Cross-site scripting in idera:yellowfin business intelligence
- CVE-2020-19586 Privilege escalation in yellowfinbi:business intelligence
- CVE-2020-1958 Credentials bypass in Apache Druid
- CVE-2020-1957 Improper Authentication in Apache Shiro
- CVE-2020-1956 Apache Kylin OS Command Injection
- CVE-2020-19559 Deserialization in dieboldnixdorf:agilis xfs for opteva
- CVE-2020-19554 Cross-site scripting in manageengine:opmanager
- CVE-2020-19553 Cross-site scripting in wuzhicms:wuzhicms
- CVE-2020-19551 File upload in wuzhicms:wuzhicms
- CVE-2020-1955 Auth bypass in Apache CouchDB
- CVE-2020-19547 Path traversal in popojicms:popojicms
- CVE-2020-1954 Apache CXF JMX Integration is vulnerable to a MITM attack
- CVE-2020-1953 Remote code execution in Apache Commons Configuration
- CVE-2020-19527 Command injection in idreamsoft:icms
- CVE-2020-1952 Improper Certificate Validation in Apache IoTDB
- CVE-2020-19515 Cross-site scripting in qdpm:qdpm
- CVE-2020-19513 Memory corruption in aida64:aida64
- CVE-2020-19511 Cross-site scripting in typesettercms:typesetter
- CVE-2020-19510 File upload in textpattern:textpattern
- CVE-2020-1951 Infinite Loop in Apache Tika
- CVE-2020-1950 Uncontrolled Resource Consumption in Apache Tika
- CVE-2020-19499 Memory corruption in struktur:libheif
- CVE-2020-19498 Denial of service in struktur:libheif
- CVE-2020-19497 Integer overflow in matio project:matio
- CVE-2020-19492 Denial of service in sam2p project:sam2p
- CVE-2020-19491 Memory corruption in sam2p project:sam2p
- CVE-2020-19490 Integer overflow in tinyexr project:tinyexr
- CVE-2020-1949 Cross-site scripting in Apache Sling
- CVE-2020-19488 Null dereference in gpac:gpac
- CVE-2020-19481 Memory corruption in gpac:gpac
- CVE-2020-1948 Deserialization of Untrusted Data in Apache Dubbo
- CVE-2020-19475 Memory corruption in flowpaper:pdf2json
- CVE-2020-19474 Use after free in flowpaper:pdf2json
- CVE-2020-19473 Denial of service in flowpaper:pdf2json
- CVE-2020-19472 Memory corruption in flowpaper:pdf2json
- CVE-2020-19471 Memory corruption in flowpaper:pdf2json
- CVE-2020-19470 Null dereference in flowpaper:pdf2json
- CVE-2020-1947 Deserialization of Untrusted Data in Apache ShardingSphere