Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 144 of 215.
- CVE-2020-1761 Information disclosure in openshift/console
- CVE-2020-1760 Cross-site scripting in ceph
- CVE-2020-1759 Weak cryptography in ceph
- CVE-2020-1758 Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Keycloak
- CVE-2020-1757 Improper Input Validation in Undertow
- CVE-2020-17564 Path traversal in feifeicms:feifeicms
- CVE-2020-17563 Path traversal in feifeicms:feifeicms
- CVE-2020-1756 Cross-site scripting in Moodle
- CVE-2020-17551 Cross-site scripting (XSS)
- CVE-2020-1755 Security feature bypass in Moodle
- CVE-2020-17542 Cross-site scripting in dotcms:dotcms
- CVE-2020-17541 Memory corruption in libjpeg-turbo:libjpeg-turbo
- CVE-2020-1754 Missing authorization in Moodle
- CVE-2020-17538 Memory corruption in artifex:ghostscript
- CVE-2020-17534 Improper synchronization in Apache Netbeans HTML/Java API
- CVE-2020-17533 Apache Accumulo Improper Handling of Insufficient Permissions
- CVE-2020-17532 Apache ServiceComb Yaml remote deserialization vulnerability
- CVE-2020-17531 Deserialization flaw in EOL Tapestry 4.
- CVE-2020-17530 Apache Struts Remote Code Execution
- CVE-2020-1753 Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
- CVE-2020-17529 Apache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP header
- CVE-2020-17528 Apache NuttX (incubating) Out of Bound Write from invalid TCP Urgent length
- CVE-2020-17527 Apache Tomcat: Request header mix-up between HTTP/2 streams
- CVE-2020-17526 Incorrect Session Validation in Apache Airflow
- CVE-2020-17525 Remote unauthenticated denial-of-service in Subversion mod_authz_svn
- CVE-2020-17523 Authentication bypass in Apache Shiro
- CVE-2020-17522 Cache Manipulation Attack in Apache Traffic Control
- CVE-2020-17521 Information Disclosure in Apache Groovy
- CVE-2020-17520 Auth bypass in Pulsar Manager
- CVE-2020-1752 Use after free in glibc
- CVE-2020-17519 Apache Flink Improper Access Control
- CVE-2020-17518 Apache Flink directory traversal attack: remote file writing through the REST API
- CVE-2020-17517 Ozone S3 Gateway allows bucket and key access to non authenticated users
- CVE-2020-17516 Authentication Bypass in Apache Cassandra
- CVE-2020-17515 Apache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944
- CVE-2020-17514 disabled hostname verificiation
- CVE-2020-17513 SSRF vulnerability in Apache Airflow
- CVE-2020-17511 Apache Airflow logs passwords in plaintext
- CVE-2020-17510 Authentication bypass in Apache Shiro
- CVE-2020-1751 Memory corruption in glibc
- CVE-2020-17509 Other in Apache Traffic Server
- CVE-2020-17508 Information disclosure in Apache Traffic Server
- CVE-2020-17507 Memory corruption in debian:debian linux
- CVE-2020-17506 SQL injection in articatech:web proxy
- CVE-2020-17505 Command injection in articatech:web proxy
- CVE-2020-17504 Command injection in barco:transform n
- CVE-2020-17503 Command injection in barco:transform n
- CVE-2020-17502 Command injection in barco:transform n
- CVE-2020-17500 Command injection in barco:transform n
- CVE-2020-1750 Denial of service in machine-config-operator-container
- CVE-2020-17498 Memory corruption in fedoraproject:fedora
- CVE-2020-17497 Denial of service in intel:inet wireless daemon
- CVE-2020-17496 vBulletin PHP Module Remote Code Execution
- CVE-2020-17495 django-celery-results Stores Sensitive Information In Cleartext
- CVE-2020-17494 Weak cryptography in untangle:untangle firewall ng
- CVE-2020-17490 SaltStack Salt Allows creating certificates with weak file permissions
- CVE-2020-1749 Information disclosure in kernel
- CVE-2020-17489 Information disclosure in canonical:ubuntu linux
- CVE-2020-17487 Memory corruption in fedoraproject:fedora
- CVE-2020-17485 File upload in uffizio:gps tracker
- CVE-2020-17484 Open redirect in uffizio:gps tracker
- CVE-2020-17483 Missing authorization in uffizio:gps tracker
- CVE-2020-17482 Information disclosure in powerdns:authoritative
- CVE-2020-17480 Cross-site scripting vulnerability in TinyMCE
- CVE-2020-1748 Incorrect Authorization in WildFly Elytron
- CVE-2020-17479 Validation bypass in jpv
- CVE-2020-17478 Weak cryptography in p5-crypt-perl project:p5-crypt-perl
- CVE-2020-17477 Information disclosure in univention:ucs\@school
- CVE-2020-17476 Cross-site scripting in mibew:messenger
- CVE-2020-17475 Auth bypass in megvii:koala firmware
- CVE-2020-17474 Auth bypass in zkteco:facedepot 7b firmware
- CVE-2020-17473 Auth bypass in zkteco:facedepot 7b firmware
- CVE-2020-17470 Weak cryptography in butok:fnet
- CVE-2020-1747 Improper Input Validation in PyYAML
- CVE-2020-17469 Null dereference in butok:fnet
- CVE-2020-17468 Memory corruption in butok:fnet
- CVE-2020-17467 Memory corruption in butok:fnet
- CVE-2020-17466 Auth bypass in turcom:trcwifizone
- CVE-2020-17465 Cross-site scripting in forgerock:identity manager
- CVE-2020-17463 Fuel CMS SQL Injection
- CVE-2020-17462 File upload in cmsmadesimple:cms made simple
- CVE-2020-1746 Exposure of Sensitive Information to an Unauthorized Actor in ansible
- CVE-2020-17458 Cross-site scripting in fabbricadigitale:multiux
- CVE-2020-17457 Cross-site scripting in fujitsu:serverview remote management
- CVE-2020-17456 Command injection in seowonintech:slc-130 firmware
- CVE-2020-17454 Cross-site scripting in wso2:api manager
- CVE-2020-17453 Cross-site scripting in wso2:api manager
- CVE-2020-17452 File upload in flatcore:flatcore
- CVE-2020-17451 Cross-site scripting in flatcore:flatcore
- CVE-2020-17450 Cross-site scripting in php-fusion:php-fusion
- CVE-2020-1745 Improper Authorization in Undertoe
- CVE-2020-17449 Cross-site scripting in php-fusion:php-fusion
- CVE-2020-17448 Security feature bypass in telegram:telegram desktop
- CVE-2020-17446 Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer
- CVE-2020-17445 Memory corruption in altran:picotcp
- CVE-2020-17444 Denial of service in altran:picotcp
- CVE-2020-17443 Integer overflow in altran:picotcp
- CVE-2020-17442 Integer overflow in altran:picotcp
- CVE-2020-17441 Memory corruption in altran:picotcp
- CVE-2020-17440 Memory corruption in uip project:uip