Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 139 of 215.
- CVE-2020-19469 Memory corruption in flowpaper:pdf2json
- CVE-2020-19468 Null dereference in flowpaper:pdf2json
- CVE-2020-19467 Use after free in flowpaper:pdf2json
- CVE-2020-19466 Memory corruption in flowpaper:pdf2json
- CVE-2020-19465 Memory corruption in flowpaper:pdf2json
- CVE-2020-19464 Denial of service in flowpaper:pdf2json
- CVE-2020-19463 Denial of service in flowpaper:pdf2json
- CVE-2020-1946 Apache SpamAssassin has an OS Command Injection vulnerability
- CVE-2020-19455 SQL injection in jdownloads:jdownloads
- CVE-2020-19451 SQL injection in jdownloads:jdownloads
- CVE-2020-19450 SQL injection in jdownloads:jdownloads
- CVE-2020-1945 Sensitive Data Exposure in Apache Ant
- CVE-2020-19447 SQL injection in jdownloads:jdownloads
- CVE-2020-1944 Other in Apache Traffic Server
- CVE-2020-1943 Cross-site scripting in Apache OFBiz
- CVE-2020-1942 Insertion of Sensitive Information into Log File in Apache NiFi
- CVE-2020-19419 Missing authorization in emerson:smart wireless gateway 1420 firmware
- CVE-2020-19417 Privilege escalation in emerson:wireless 1420 gateway firmware
- CVE-2020-1941 Apache ActiveMQ webconsole admin GUI is open to XSS
- CVE-2020-1940 Improper Removal of Sensitive Information Before Storage or Transfer in Apache Jackrabbit Oak
- CVE-2020-1939 Null dereference in Apache NuttX (incubating)
- CVE-2020-1938 Apache Tomcat Improper Privilege Management
- CVE-2020-1937 SQL Injection in Kylin
- CVE-2020-19364 File upload in open-emr:openemr
- CVE-2020-19363 Information disclosure in vtiger:vtiger crm
- CVE-2020-19362 Cross-site scripting in vtiger:vtiger crm
- CVE-2020-19361 Cross-site scripting in medintux:medintux
- CVE-2020-19360 Path traversal in fhem:fhem
- CVE-2020-1936 Stored XSS in Apache Ambari
- CVE-2020-1935 Potential HTTP request smuggling in Apache Tomcat
- CVE-2020-1934 Information disclosure in Apache HTTP Server
- CVE-2020-1933 Cross-site scripting in Apache NiFi
- CVE-2020-19323 Memory corruption in dlink:dir-619l firmware
- CVE-2020-19320 Memory corruption in dlink:dir-619l firmware
- CVE-2020-1932 Information disclosure in Apache Superset
- CVE-2020-19319 Memory corruption in dlink:dir-619l firmware
- CVE-2020-19318 Memory corruption in dlink:dir-605l firmware
- CVE-2020-19316 OS Command Injection in Laravel Framework
- CVE-2020-1931 Command injection in Apache SpamAssassin
- CVE-2020-19305 Path traversal in metinfo:metinfo
- CVE-2020-19304 Path traversal in metinfo:metinfo
- CVE-2020-19303 File upload in houdunren:hdcms
- CVE-2020-19302 File upload in vaethink:vaethink
- CVE-2020-19301 SQL injection in vaethink:vaethink
- CVE-2020-1930 Command injection in Apache SpamAssassin
- CVE-2020-19295 Cross-site scripting in jeesns:jeesns
- CVE-2020-19294 Cross-site scripting in jeesns:jeesns
- CVE-2020-19293 Cross-site scripting in jeesns:jeesns
- CVE-2020-19292 Cross-site scripting in jeesns:jeesns
- CVE-2020-19291 Cross-site scripting in jeesns:jeesns
- CVE-2020-19290 Cross-site scripting in jeesns:jeesns
- CVE-2020-1929 Improper Certificate Validation in Apache Beam
- CVE-2020-19289 Cross-site scripting in jeesns:jeesns
- CVE-2020-19288 Cross-site scripting in jeesns:jeesns
- CVE-2020-19287 Cross-site scripting in jeesns:jeesns
- CVE-2020-19286 Cross-site scripting in jeesns:jeesns
- CVE-2020-19285 Cross-site scripting in jeesns:jeesns
- CVE-2020-19284 Cross-site scripting in jeesns:jeesns
- CVE-2020-19283 Cross-site scripting in jeesns:jeesns
- CVE-2020-19282 Cross-site scripting in jeesns:jeesns
- CVE-2020-19281 Cross-site scripting in jeesns:jeesns
- CVE-2020-19280 Cross-site request forgery in jeesns:jeesns
- CVE-2020-1928 Apache NiFi Insertion of Sensitive Information into Log File
- CVE-2020-19279 Path traversal in wide project:wide
- CVE-2020-19278 Phachon mm-wiki Cross Site Request Forgery vulnerability
- CVE-2020-19277 Phachon mm-wiki vulnerable to stored cross-site scripting (XSS)
- CVE-2020-19275 Information disclosure in dhcms project:dhcms
- CVE-2020-19274 Cross-site scripting in dhcms project:dhcms
- CVE-2020-1927 Open redirect in Apache HTTP Server
- CVE-2020-19268 Cross-site request forgery in dswjcms project:dswjcms
- CVE-2020-19267 File upload in dswjcms project:dswjcms
- CVE-2020-19266 Cross-site scripting in dswjcms project:dswjcms
- CVE-2020-19265 Cross-site scripting in dswjcms project:dswjcms
- CVE-2020-19264 Cross-site request forgery in mipcms:mipcms
- CVE-2020-19263 Cross-site request forgery in mipcms:mipcms
- CVE-2020-1926 Timing attack in Cookie signature verification
- CVE-2020-1925 Server-Side Request Forgery (SSRF) in Apache Olingo
- CVE-2020-19248 Code injection in pbootcms:pbootcms
- CVE-2020-19229 Deserialization in jeesite:jeesite
- CVE-2020-19228 File upload in bludit:bludit
- CVE-2020-19217 SQL injection in piwigo:piwigo
- CVE-2020-19216 SQL injection in piwigo:piwigo
- CVE-2020-19215 SQL injection in piwigo:piwigo
- CVE-2020-19213 SQL injection in piwigo:piwigo
- CVE-2020-19212 SQL injection in piwigo:piwigo
- CVE-2020-1921 Memory corruption in HHVM
- CVE-2020-19204 Cross-site scripting in ipfire:ipfire
- CVE-2020-19203 Cross-site scripting in netgate:pfsense
- CVE-2020-19202 Cross-site scripting in ipfire:ipfire
- CVE-2020-19201 Cross-site scripting in netgate:pfsense
- CVE-2020-1920 Regular expression denial of service in react-native
- CVE-2020-19199 Cross-site request forgery in phpok:phpok
- CVE-2020-19190 Memory corruption in invisible-island:ncurses
- CVE-2020-1919 Memory corruption in HHVM
- CVE-2020-19189 Memory corruption in debian:debian linux
- CVE-2020-19188 Memory corruption in invisible-island:ncurses
- CVE-2020-19187 Memory corruption in invisible-island:ncurses
- CVE-2020-19186 Memory corruption in invisible-island:ncurses
- CVE-2020-19185 Memory corruption in invisible-island:ncurses
- CVE-2020-1918 Memory corruption in HHVM