Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 14 of 215.
- GHSA-pm9v-325f-5g74 Malicious Package in saync
- GHSA-pjxp-f379-6284 Malicious Package in @fangrong/xoc
- GHSA-pj97-j597-ppm7 Malicious Package in rqeuest
- GHSA-phph-xpj4-wvcv Cross-Site Scripting in hexo-admin
- GHSA-pcqq-5962-hvcw Denial of Service in uap-core when processing crafted User-Agent strings
- GHSA-pc7q-c837-3wjq Malicious Package in wallet-address-validtaor
- GHSA-pc5p-h8pf-mvwp Machine-In-The-Middle in https-proxy-agent
- GHSA-p9vv-3945-x93h Cross-Site Scripting in semantic-ui-search
- GHSA-p9g3-vpvp-hcj5 Malicious Package in bufber-xor
- GHSA-p94w-42g3-f7h4 Holder can (re)create authentic credentials after receiving a credential in vp-toolkit
- GHSA-p8fm-w787-x6x3 Malicious Package in portionfatty12
- GHSA-p7w2-mc6m-mfx2 Malicious Package in scroool
- GHSA-p7qp-3fh7-pv4p Malicious Package in buffur-xor
- GHSA-p77h-hv6g-fmfp Sensitive Data Exposure in ibm_db
- GHSA-p75v-367r-2v23 `cell-project` used incorrect variance when projecting through `&Cell<T>`
- GHSA-p68v-frgx-4rjp Denial of Service via Cache Flooding
- GHSA-p62r-jf56-h429 Malicious Package in evil-package
- GHSA-p5p2-rhc3-wmf3 Malicious Package in siganle
- GHSA-p59g-6cqr-m73w Malicious Package in bmap
- GHSA-p4mf-4qvh-w8g5 Malicious Package in bitcionjslib
- GHSA-p3jx-g34v-q56j Malicious Package in j3-sha3
- GHSA-p33q-w45h-2hcj Malicious Package in 4equest
- GHSA-p32g-242c-76h3 Malicious Package in geoheat
- GHSA-mxmj-84q8-34r7 Command Injection in expressfs
- GHSA-mvch-rh6h-2m47 Malicious Package in equest
- GHSA-mq9h-cwc2-6j5r Malicious Package in midway-dataproxy
- GHSA-mpjf-8cmf-p789 Cross-Site Scripting in jingo
- GHSA-mp55-2274-4pj8 Malicious Package in buffer-xgr
- GHSA-mmqv-m45h-q2hp Sandbox Breakout / Arbitrary Code Execution in localeval
- GHSA-mmph-wp49-r48h Malicious Package in experss
- GHSA-mm44-wc5p-wqhq Denial of service due to reference expansion in versions earlier than 4.0
- GHSA-mjjq-c88q-qhr6 Cross-Site Scripting in dompurify
- GHSA-mjcr-rqjg-rhg3 Implementation trusts the "me" field returned by the authorization server without verifying it
- GHSA-mhxg-pr3j-v9gr Malicious Package in colne
- GHSA-mh5c-679w-hh4r Denial of Service in mongodb
- GHSA-mgff-xpg3-3gwc Malicious Package in bsae-x
- GHSA-mg85-8mv5-ffjr Denial of Service in ammo
- GHSA-mg69-6j3m-jvgw HTML Injection in marky-markdown
- GHSA-mfcp-34xw-p57x Authentication Bypass in saml2-js
- GHSA-mfc2-93pr-jf92 Malicious code in `loadyaml`
- GHSA-m9r7-q9fc-qwx5 Malicious Package in maybemaliciouspackage
- GHSA-m9hw-7xfv-wqg7 Prototype Pollution in json-logic-js
- GHSA-m86m-5m44-pc93 Denial of Service in grpc-ts-health-check
- GHSA-m852-866j-69j8 Malicious Package in eslint-config-airbnb-standard
- GHSA-m7xv-7p93-g6q8 Malicious Package in libubx
- GHSA-m7qm-r2r5-f77q Cross-Site Scripting in react-marked-markdown
- GHSA-m794-qv59-gj7c Malicious Package in signqle
- GHSA-m6q2-9pfm-2wvr Malicious Package in wallet-address-vaildator
- GHSA-m5pf-5894-jmx7 Malicious Package in sailclothjs
- GHSA-m5p4-7wf9-6w99 Malicious Package in regenrator
- GHSA-m5ch-gx8g-rg73 Remote Code Execution in pomelo-monitor
- GHSA-m4vv-p6fq-jhqp Directory Traversal in @vivaxy/here
- GHSA-m4fq-xh7w-jhfm Malicious Package in crytpo-js
- GHSA-m36m-x4c5-rjxj Silently Runs Cryptocoin Miner in hooka-tools
- GHSA-m2fp-c79h-rr79 Malicious Package in tensorplow
- GHSA-m25q-fwg4-9v2p Malicious Package in awesome_react_utility
- GHSA-jxf5-7x3j-8j9m Malicious Package in load-from-cwd-or-npm
- GHSA-jvfv-jhw9-jmpp Malicious Package in b5ffer-xor
- GHSA-jrj9-5qp6-2v8q Machine-In-The-Middle in airtable
- GHSA-jqvv-r4w3-8f7w Malicious Package in bictoind-rpc
- GHSA-jqjg-v355-hr9q Malicious Package in buffer-xop
- GHSA-jp9g-5x75-ccp8 Malicious Package in colro-name
- GHSA-jp99-5h8w-gmxc Sandbox Breakout / Arbitrary Code Execution in @zhaoyao91/eval-in-vm
- GHSA-jmqm-f2gx-4fjv Sensitive information exposure through logs in npm-registry-fetch
- GHSA-jjhg-qw5v-r8xx Malicious Package in anarchy
- GHSA-jh67-3wqw-cvhr Malicious Package in js-sxa3
- GHSA-jfx5-7mr2-g8hg Malicious Package in alico
- GHSA-jfcc-rm7f-xgf8 Cross-Site Scripting in mavon-editor
- GHSA-jf8x-wg7f-p3w8 Malicious Package in cage-js
- GHSA-jf55-rgpx-p6rx Malicious Package in iie-viz
- GHSA-jcmh-9fvm-j39w Malicious Package in body-parse-xml
- GHSA-jchg-g94r-64qg Malicious Package in mogobd
- GHSA-j8r2-2x94-2q67 Cross-Site Scripting in diagram-js-direct-editing
- GHSA-j8qr-rvcv-crhv Malicious Package in electron-native-notify
- GHSA-j8hw-49gg-vq3w Malicious Package in retcodelog
- GHSA-j899-348x-h3rq Malicious Package in serializes
- GHSA-j7wp-vjj6-cp5m Cross-Site Scripting in @progress/kendo-angular-editor
- GHSA-j6x7-42x2-hpcf Malicious Package in buffer-xoz
- GHSA-j6v9-xgvh-f796 Command Injection in wxchangba
- GHSA-j67m-jg9p-ppg4 Malicious Package in ns-sha3
- GHSA-j5qg-46p9-w2rp Malicious Package in jekyll-for-github-projects
- GHSA-j5jc-jf8f-86q7 Malicious Package in dictum.js
- GHSA-j4vm-hg8g-g9qv Malicious Package in antd-cloud
- GHSA-j4ch-mw66-xmqv Malicious Package in pensi-scheduler
- GHSA-j3qq-qvc8-c6g7 Malicious Package in foever
- GHSA-hxwc-5vw9-2w4w NoSQL Injection in loopback-connector-mongodb
- GHSA-hx78-272p-mqqh Authorization Bypass in graphql-shield
- GHSA-hx5x-49mm-vmhw SQL Injection in sails-mysql
- GHSA-hwh3-fhf6-73x9 Malicious Package in bictoinjs-lib
- GHSA-hvxq-j2r4-4jm8 Regular Expression Denial of Service in sql-injection
- GHSA-hvgc-mggg-pxr2 Malicious Package in js-sha7
- GHSA-hv4w-jhcj-6wfw Cross-Site Scripting in snekserve
- GHSA-hrpp-f84w-xhfg Outdated Static Dependency in vue-moment
- GHSA-hrfh-fp4x-crrq Persistent XSS in newsletter module in Shopware
- GHSA-hq8g-qq57-5275 SQL Injection in untitled-model
- GHSA-hpr5-wp7c-hh5q Cross-Site Scripting in mrk.js
- GHSA-hj5w-xgw9-w4rj Malicious Package in coinstrng
- GHSA-hgwm-pv9h-q5m7 Potential XSS in jQuery dependency in Mirador
- GHSA-hgr5-82rc-p936 Cross-Site Scripting in md-data-table
- GHSA-hg7w-2pf7-mxm2 Malicious Package in wbe3