Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 141 of 215.
- CVE-2020-1886 Memory corruption in WhatsApp Business for Android
- CVE-2020-1885 Privilege escalation in Oculus Desktop
- CVE-2020-18839 Memory corruption in freedesktop:poppler
- CVE-2020-18831 Memory corruption in exiv2:exiv2
- CVE-2020-1883 Denial of service in NIP6800
- CVE-2020-1882 Missing authorization in Ever-L29B
- CVE-2020-1881 Denial of service in NIP6800;Secospace USG6600;USG9500
- CVE-2020-1880 Denial of service in Lion-AL00C
- CVE-2020-1879 Security feature bypass in HEGE-560;HEGE-570;OSCA-550;OSCA-550A;OSCA-550AX;OSCA-550X
- CVE-2020-18781 Memory corruption in audiofile:audiofile
- CVE-2020-18780 Use after free in nasm:netwide assembler
- CVE-2020-1878 Auth bypass in OxfordS-AN00A
- CVE-2020-18778 Memory corruption in libav:libav
- CVE-2020-18776 Memory corruption in libav:libav
- CVE-2020-18775 Memory corruption in libav:libav
- CVE-2020-18774 Denial of service in exiv2:exiv2
- CVE-2020-18773 Memory corruption in exiv2:exiv2
- CVE-2020-18771 Memory corruption in debian:debian linux
- CVE-2020-18770 Denial of service in gdraheim:zziplib
- CVE-2020-1877 Memory corruption in NIP6800;Secospace USG6600;USG9500
- CVE-2020-18768 Memory corruption in libtiff:libtiff
- CVE-2020-18766 Cross-site scripting in antsword project:antsword
- CVE-2020-1876 Memory corruption in NIP6800;Secospace USG6600;USG9500
- CVE-2020-18759 Information disclosure in dcce:mac1100 plc firmware
- CVE-2020-18758 Command injection in dcce:mac1100 plc firmware
- CVE-2020-18757 Missing authorization in dcce:mac1100 plc firmware
- CVE-2020-18756 Memory corruption in dcce:mac1100 plc firmware
- CVE-2020-18754 Information disclosure in dcce:mac1100 plc firmware
- CVE-2020-18753 Missing authorization in dcce:mac1100 plc firmware
- CVE-2020-18750 Memory corruption in flowpaper:pdf2json
- CVE-2020-1875 Memory corruption in NIP6800;Secospace USG6600;USG9500
- CVE-2020-18748 Cross-site scripting in typora:typora
- CVE-2020-18746 SQL injection in aitecms:aitecms
- CVE-2020-18741 Missing authorization in thinksaas:thinksaas
- CVE-2020-1874 Memory corruption in NIP6800;Secospace USG6600;USG9500
- CVE-2020-18737 Cross-site scripting in typora:typora
- CVE-2020-18735 Memory corruption in eclipse:cyclone data distribution service
- CVE-2020-18734 Memory corruption in eclipse:cyclone data distribution service
- CVE-2020-18731 Null dereference in iec104 project:iec104
- CVE-2020-18730 Null dereference in iec104 project:iec104
- CVE-2020-1873 Memory corruption in NIP6800;Secospace USG6600;USG9500
- CVE-2020-18724 Cross-site scripting in altn:mdaemon webmail
- CVE-2020-18723 Cross-site scripting in altn:mdaemon webmail
- CVE-2020-1872 Security feature bypass in HUAWEI P10 Plus
- CVE-2020-18717 SQL injection in zzzcms:zzzphp
- CVE-2020-18716 SQL injection in rockoa:rockoa
- CVE-2020-18714 SQL injection in rockoa:rockoa
- CVE-2020-18713 SQL injection in rockoa:rockoa
- CVE-2020-1871 Other in USG9500
- CVE-2020-18705 Improper Restriction of XML External Entity Reference in Quokka
- CVE-2020-18704 Unrestricted Upload of File with Dangerous Type in django-widgy
- CVE-2020-18703 Improper Restriction of XML External Entity Reference in Quokka
- CVE-2020-18702 Cross Site Scripting (XSS) in Quokka
- CVE-2020-18701 Auth bypass in talelin:lin-cms-flask
- CVE-2020-1870 Denial of service in CloudEngine 12800
- CVE-2020-18699 Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability
- CVE-2020-18698 Lin-CMS-Flask vulnerable to Improper Authentication
- CVE-2020-18694 Cross-site request forgery in ignitedcms:ignitedcms
- CVE-2020-18693 Cross-site scripting in mineweb:minewebcms
- CVE-2020-18685 Other in atlassian:floodlight
- CVE-2020-18684 Integer overflow in atlassian:floodlight
- CVE-2020-18683 Other in atlassian:floodlight
- CVE-2020-18671 Cross-site scripting in roundcube:webmail
- CVE-2020-18670 Cross-site scripting in roundcube:webmail
- CVE-2020-18668 Cross-site scripting in webport:web port
- CVE-2020-18667 SQL injection in webport:webport
- CVE-2020-18665 Path traversal in webport:web port
- CVE-2020-18664 Cross-site scripting in webport:web port
- CVE-2020-18663 Cross-site scripting in sir:gnuboard
- CVE-2020-18662 SQL injection in sir:gnuboard
- CVE-2020-18661 Cross-site scripting in sir:gnuboard
- CVE-2020-18660 Open redirect in get-simple:getsimplecms
- CVE-2020-1866 Memory corruption in NIP6800;S12700;S2700;S5700;S6700;S7700;S9700;Secospace USG6600;USG9500
- CVE-2020-18659 Cross-site scripting in get-simple:getsimplecms
- CVE-2020-18658 Cross-site scripting in get-simple:getsimplecms
- CVE-2020-18657 Cross-site scripting in get-simple:getsimplecms
- CVE-2020-18654 Cross-site scripting in wuzhicms:wuzhicms
- CVE-2020-18652 Memory corruption in exempi project:exempi
- CVE-2020-18651 Memory corruption in exempi project:exempi
- CVE-2020-1865 Memory corruption in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800
- CVE-2020-18648 Cross-site request forgery in juqingcms:juqingcms
- CVE-2020-18647 Information disclosure in 5none:nonecms
- CVE-2020-18646 Information disclosure in 5none:nonecms
- CVE-2020-1864 Auth bypass in Secospace AntiDDoS8000
- CVE-2020-1863 Memory corruption in Huawei USG6000V
- CVE-2020-1862 Memory corruption in CampusInsight;ManageOne
- CVE-2020-1861 Information disclosure in CloudEngine 12800
- CVE-2020-1860 Security feature bypass in NIP6800;Secospace USG6600;USG9500
- CVE-2020-1858 Denial of service in NIP6800
- CVE-2020-1857 Information disclosure in NIP6800
- CVE-2020-18568 Command injection in dlink:dsr-1000n firmware
- CVE-2020-1856 Information disclosure in NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, USG9500
- CVE-2020-1855 Security feature bypass in HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X
- CVE-2020-18544 SQL injection in wms project:wms
- CVE-2020-1853 Path traversal in GaussDB 200
- CVE-2020-18494 Memory corruption in hdfgroup:hdf5
- CVE-2020-1848 Other in Jackman-AL00D
- CVE-2020-18477 SQL injection in hucart:hucart
- CVE-2020-18476 SQL injection in hucart:hucart
- CVE-2020-18475 Cross-site scripting in hucart:hucart