Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 143 of 215.
- CVE-2020-18173 Code injection in 1password:1password
- CVE-2020-18172 Code injection in trezor:bridge
- CVE-2020-18171 Privilege escalation in techsmith:snagit
- CVE-2020-18170 Privilege escalation in abloy:key manager
- CVE-2020-1817 Privilege escalation in PCManager
- CVE-2020-18169 Privilege escalation in techsmith:snagit
- CVE-2020-18167 Cross-site scripting in laobancms:laobancms
- CVE-2020-18166 File upload in laobancms:laobancms
- CVE-2020-18165 Cross-site scripting in laobancms:laobancms
- CVE-2020-18164 SQL injection in tp-shop:tp-shop
- CVE-2020-1816 Denial of service in NIP6800
- CVE-2020-18158 Cross-site scripting in hucart:hucart
- CVE-2020-18157 Cross-site request forgery in metinfo:metinfo
- CVE-2020-18155 SQL Injection in Subrion CMS
- CVE-2020-18151 ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability
- CVE-2020-1815 Denial of service in NIP6800
- CVE-2020-18145 Cross-site scripting in baidu:umeditor
- CVE-2020-18144 SQL injection in ectouch:ectouch
- CVE-2020-1814 Race condition in NIP6800
- CVE-2020-18132 Cross-site scripting in mipcms:mipcms
- CVE-2020-18131 Cross-site request forgery in clanscripts project:clanscripts
- CVE-2020-1813 Auth bypass in HUAWEI P30
- CVE-2020-18129 Cross-site request forgery in eyoucms:eyoucms
- CVE-2020-18127 Path traversal in indexhibit:indexhibit
- CVE-2020-18126 Cross-site scripting in indexhibit:indexhibit
- CVE-2020-18125 Cross-site scripting in indexhibit:indexhibit
- CVE-2020-18124 Cross-site request forgery in indexhibit:indexhibit
- CVE-2020-18123 Cross-site request forgery in indexhibit:indexhibit
- CVE-2020-18121 Misconfiguration in indexhibit:indexhibit
- CVE-2020-1812 Auth bypass in HUAWEI P30
- CVE-2020-18116 SQL injection in youdiancms:youdiancms
- CVE-2020-18114 File upload in dedecms:dedecms
- CVE-2020-1811 Command injection in GaussDB 200
- CVE-2020-18106 SQL injection in wms project:wms
- CVE-2020-18102 Cross-site scripting in hotels server project:hotels server
- CVE-2020-1810 Weak cryptography in CloudEngine 12800;S5700;S6700
- CVE-2020-1809 Security feature bypass in HUAWEI Mate 10
- CVE-2020-18084 Cross-site scripting in yzmcms:yzmcms
- CVE-2020-18081 SQL injection in sem-cms:semcms
- CVE-2020-1808 Memory corruption in Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20
- CVE-2020-18078 Auth bypass in sem-cms:semcms
- CVE-2020-18077 Memory corruption in ftpshell:ftpshell server
- CVE-2020-18070 Path traversal in idreamsoft:icms
- CVE-2020-1807 Missing authorization in HUAWEI Mate 20
- CVE-2020-18066 Cross-site scripting in zrlog:zrlog
- CVE-2020-18065 Cross-site scripting in popojicms:popojicms
- CVE-2020-1806 Memory corruption in Honor V10
- CVE-2020-1805 Memory corruption in Honor V10
- CVE-2020-18048 Command injection in bertanddip:craigms
- CVE-2020-1804 Memory corruption in Honor V10
- CVE-2020-18035 Cross-site scripting in jeesns:jeesns
- CVE-2020-18032 Memory corruption in debian:debian linux
- CVE-2020-1803 Auth bypass in Honor V20
- CVE-2020-18022 Cross-site scripting in qibosoft:qibocms
- CVE-2020-18020 SQL injection in phpshe:mall system
- CVE-2020-1802 Security feature bypass in OSCA-550;OSCA-550A;OSCA-550AX;OSCA-550X
- CVE-2020-18019 SQL injection in xinfu:oa system
- CVE-2020-18013 SQL injection in whatsns:whatsns
- CVE-2020-1801 Auth bypass in Mate 30 Pro;Mate 30
- CVE-2020-1800 Missing authorization in HUAWEI P30
- CVE-2020-17999 Cross-site scripting in 1234n:minicms
- CVE-2020-1799 Use after free in E6878-370
- CVE-2020-1798 Auth bypass in HUAWEI P30
- CVE-2020-1797 Missing authorization in HUAWEI Mate 20
- CVE-2020-1796 Missing authorization in HUAWEI Mate 20;HUAWEI Mate 30 Pro
- CVE-2020-17952 Code injection in topthink/think
- CVE-2020-1795 Security feature bypass in HUAWEI Mate 20;HUAWEI Mate 30 Pro
- CVE-2020-1794 Auth bypass in HUAWEI Mate 20;HUAWEI Mate 30 Pro
- CVE-2020-1793 Auth bypass in HUAWEI Mate 20;HUAWEI Mate 30 Pro
- CVE-2020-1792 Memory corruption in Honor V10
- CVE-2020-1791 Business logic in HUAWEI Mate 20
- CVE-2020-17901 Cross-site request forgery in pbootcms:pbootcms
- CVE-2020-1790 Command injection in GaussDB 200
- CVE-2020-17891 Cross-site scripting in tp-link:archer c1200 firmware
- CVE-2020-1789 Auth bypass in OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X
- CVE-2020-1788 Auth bypass in Honor V30
- CVE-2020-1787 Auth bypass in HUAWEI Mate 20
- CVE-2020-1786 Auth bypass in HUAWEI Mate 20 Pro
- CVE-2020-1785 Denial of service in Mate 10 Pro;Honor V10;Honor 10;Nova 4
- CVE-2020-1779 Dynamic templates reveal sensitive data when OTRS tags are used
- CVE-2020-1778 Bypassing user account validation
- CVE-2020-1777 Agent names disclosed in chat feature
- CVE-2020-1776 Invalidating or changing user does not invalidate session
- CVE-2020-17759 Command injection in evernote:evernote
- CVE-2020-17753 Business logic in rc project:rc
- CVE-2020-17752 Integer overflow in mon project:mon
- CVE-2020-1775 Information disclosure in external interface
- CVE-2020-1774 Information disclosure
- CVE-2020-1773 Session / Password / Password token leak
- CVE-2020-1772 Information Disclosure
- CVE-2020-1771 Possible XSS in Customer user address book
- CVE-2020-1770 Information disclosure in support bundle files
- CVE-2020-1769 Autocomplete in the form login screens
- CVE-2020-1768 External Interface does not invalidate session
- CVE-2020-1767 Possible to send drafted messages as wrong agent
- CVE-2020-1766 Improper handling of uploaded inline images
- CVE-2020-1765 Spoofing of From field in several screens
- CVE-2020-1764 Hard coded cryptographic key in Kiali
- CVE-2020-1763 Memory corruption in libreswan
- CVE-2020-1762 Insufficient Session Expiration in Kiali