Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 140 of 215.
- CVE-2020-1917 Memory corruption in HHVM
- CVE-2020-19165 SQL injection in phpshe:phpshe
- CVE-2020-1916 Integer overflow in HHVM
- CVE-2020-19159 Cross-site request forgery in laiketui:laiketui
- CVE-2020-19158 Cross-site scripting in s-cms:s-cms
- CVE-2020-19157 Cross-site scripting in wenkucms project:wenkucms
- CVE-2020-19156 Cross-site scripting in ari-soft:ari adminer
- CVE-2020-19155 Missing authorization in jflyfox:jfinal cms
- CVE-2020-19154 Path traversal in jflyfox:jfinal cms
- CVE-2020-19151 Command injection in jflyfox:jfinal cms
- CVE-2020-19150 Path traversal in jflyfox:jfinal cms
- CVE-2020-1915 Out-of-bounds Read in Facebook Hermes
- CVE-2020-19148 Cross-site scripting in jflyfox:jfinal cms
- CVE-2020-19147 Path traversal in jflyfox:jfinal cms
- CVE-2020-19146 Path traversal in jflyfox:jfinal cms
- CVE-2020-19144 Memory corruption in debian:debian linux
- CVE-2020-19143 Memory corruption in debian:debian linux
- CVE-2020-19142 Command injection in idreamsoft:icms
- CVE-2020-1914 Always-Incorrect Control Flow Implementation in Facebook Hermes
- CVE-2020-19138 File upload in dotcms:dotcms
- CVE-2020-19137 Missing authorization in autumn project:autumn
- CVE-2020-19131 Memory corruption in debian:debian linux
- CVE-2020-1913 Signed to Unsigned Conversion Error in Facebook Hermes
- CVE-2020-1912 Out-of-bounds Read and Out-of-bounds Write in Facebook Hermes
- CVE-2020-19118 Cross-site scripting in yzmcms:yzmcms
- CVE-2020-19114 SQL injection in projectworlds:online book store project in php
- CVE-2020-19113 File upload in projectworlds:online book store project in php
- CVE-2020-19112 SQL injection in projectworlds:online book store project in php
- CVE-2020-19111 Auth bypass in projectworlds:online book store project in php
- CVE-2020-19110 SQL injection in projectworlds:online book store project in php
- CVE-2020-1911 Access of Resource Using Incompatible Type in Facebook Hermes
- CVE-2020-19109 SQL injection in projectworlds:online book store project in php
- CVE-2020-19108 SQL injection in projectworlds:online book store project in php
- CVE-2020-19107 SQL injection in projectworlds:online book store project in php
- CVE-2020-1910 Memory corruption in WhatsApp Business for Android
- CVE-2020-1909 Use after free in WhatsApp Business for iOS
- CVE-2020-1908 Security feature bypass in WhatsApp Business for iOS
- CVE-2020-1907 Memory corruption in WhatsApp Business for Android
- CVE-2020-1906 Memory corruption in WhatsApp Business for Android
- CVE-2020-1905 Information disclosure in WhatsApp for Android
- CVE-2020-19049 Cross-site scripting in mybb:mybb
- CVE-2020-19048 Cross-site scripting in mybb:mybb
- CVE-2020-19047 Cross-site request forgery in iwebshop:iwebshop
- CVE-2020-19046 Cross-site scripting in s-cms:s-cms
- CVE-2020-19042 Cross-site scripting in zzcms:zzcms
- CVE-2020-1904 Path traversal in WhatsApp Business for iOS
- CVE-2020-19038 Missing authorization in halo:halo
- CVE-2020-19037 Auth bypass in halo:halo
- CVE-2020-1903 Denial of service in WhatsApp Business for iOS
- CVE-2020-19028 File upload in emlog:emlog
- CVE-2020-1902 Information disclosure in WhatsApp Business for Android
- CVE-2020-1901 Denial of service in WhatsApp for iOS
- CVE-2020-19007 Cross-site scripting in halo:halo
- CVE-2020-19005 Missing authorization in zrlog:zrlog
- CVE-2020-19003 Verification check bypass in Gate One
- CVE-2020-19002 Mezzanine Cross Site Scripting (XSS) vulnerability
- CVE-2020-19001 Command Injection in Simiki
- CVE-2020-19000 Cross Site Scripting (XSS) in Simiki
- CVE-2020-1900 Use after free in HHVM
- CVE-2020-18999 Cross-site scripting in blog mini project:blog mini
- CVE-2020-18998 Cross-site scripting in blog mini project:blog mini
- CVE-2020-1899 Deserialization in HHVM
- CVE-2020-18985 Open redirect in synacor:zimbra collaboration suite
- CVE-2020-18984 Cross-site scripting in synacor:zimbra collaboration suite
- CVE-2020-18982 Cross-site scripting in halo:halo
- CVE-2020-18980 Code injection in halo:halo
- CVE-2020-1898 Denial of service in HHVM
- CVE-2020-18979 Cross-site scripting in halo:halo
- CVE-2020-18976 Memory corruption in broadcom:tcpreplay
- CVE-2020-18974 Memory corruption in nasm:netwide assembler
- CVE-2020-18972 Information disclosure in podofo project:podofo
- CVE-2020-18971 Memory corruption in podofo project:podofo
- CVE-2020-1897 Use after free in proxygen
- CVE-2020-18964 Cross-site request forgery in forestblog project:forestblog
- CVE-2020-1896 Memory corruption in Hermes
- CVE-2020-1895 Memory corruption in Instagram for Android
- CVE-2020-1894 Memory corruption in WhatsApp Android
- CVE-2020-1893 Memory corruption in HHVM
- CVE-2020-1892 Memory corruption in HHVM
- CVE-2020-18917 Code injection in dedecms:dedecms
- CVE-2020-18913 SQL injection in ecisp:espcms-p8
- CVE-2020-18912 File upload in earcms:ear
- CVE-2020-1891 Memory corruption in WhatsApp Android
- CVE-2020-18900 Memory corruption in libexe project:libexe
- CVE-2020-1890 Other in WhatsApp Business for Android
- CVE-2020-18899 Denial of service in exiv2:exiv2
- CVE-2020-18898 Denial of service in exiv2:exiv2
- CVE-2020-18897 Use after free in libpff project:libpff
- CVE-2020-18890 Missing authorization in puppycms:puppycms
- CVE-2020-1889 Security feature bypass in WhatsApp Desktop
- CVE-2020-18889 Cross-site request forgery in puppycms:puppycms
- CVE-2020-18888 Missing authorization in puppycms:puppycms
- CVE-2020-18886 File upload in phpmywind:phpmywind
- CVE-2020-18885 Command injection in phpmywind:phpmywind
- CVE-2020-1888 Memory corruption in HHVM
- CVE-2020-18879 File upload in bludit:bludit
- CVE-2020-18878 Path traversal in skycaiji:skycaiji
- CVE-2020-18877 SQL injection in wuzhicms:wuzhicms
- CVE-2020-18875 Code injection in dotcms:dotcms
- CVE-2020-1887 Security feature bypass in Osquery