Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 15 of 215.
- GHSA-hg79-j56m-fxgv Cross-Site Scripting in react
- GHSA-hg5q-rj62-c43g Malicious Package in reqest
- GHSA-hfc6-79wv-5hpw Malicious Package in blingjs
- GHSA-h9wr-xr4r-66fh Cross-Site Scripting in dmn-js-properties-panel
- GHSA-h97g-4mx7-5p2p Open Redirect in apostrophe
- GHSA-h726-x36v-rx45 Prototype Pollution in lodash.merge
- GHSA-h6mq-3cj6-h738 Reverse Tabnabbing in showdown
- GHSA-h6m3-cx24-9626 Malicious Package in js-sla3
- GHSA-h5vm-jhq7-w647 Malicious Package in momen
- GHSA-h5vj-f7r9-w564 Entropy Backdoor in text-qrcode
- GHSA-h5mp-5q4p-ggf5 Prototype Pollution in lodash.defaultsdeep
- GHSA-h44f-769q-j6px Malicious Package in requet
- GHSA-h3m2-h22h-695r Malicious Package in ali-contributor
- GHSA-h2j3-gg8w-4858 Malicious Package in buffer-xos
- GHSA-h26f-j4mv-84g7 Malicious Package in asycn
- GHSA-h24p-2c3m-5qf4 Malicious Package in owl-orchard-apple-sunshine
- GHSA-h232-fpqx-mqgr Malicious Package in log-symboles
- GHSA-gvm7-8fq3-qjj2 Malicious Package in bs85
- GHSA-gvff-25cc-4f66 Path Traversal in restify-swagger-jsdoc
- GHSA-gr4j-r575-g665 Cross-Site Scripting in highcharts
- GHSA-gqq4-937c-2282 Malicious Package in juffer-xor
- GHSA-gqf6-75v8-vr26 Arbitrary File Write in bin-links
- GHSA-gpg2-7r7j-4pm9 Malicious Package in buffer-xob
- GHSA-gmjp-776j-2394 Malicious Package in ripmed160
- GHSA-gm9x-q798-hmr4 Command Injection in git-tags-remote
- GHSA-gjph-xf5q-6mfq Denial of Service in @hapi/ammo
- GHSA-gjc9-932x-c59p Malicious Package in leaflet-gpx
- GHSA-gfm8-g3vm-53jh Malicious Package in leetlog
- GHSA-gfjr-xqhm-qvv3 Malicious Package in aysnc
- GHSA-gfj6-p24g-6hpm Malicious Package in jc-sha3
- GHSA-gfg9-x6px-r7gr Library exclusively intended to obfuscate code.
- GHSA-gcfc-mgg3-8j2c Malicious Package in sdfjghlkfjdshlkjdhsfg
- GHSA-gc25-3vc5-2jf9 Sandbox Breakout / Arbitrary Code Execution in sandbox
- GHSA-g9wg-wq4f-2x5w Cross-Site Scripting in console-feed
- GHSA-g9wf-393q-4w38 Malicious Package in only-test-not-install
- GHSA-g9r4-xpmj-mj65 Prototype Pollution in handlebars
- GHSA-g9cg-h3jm-cwrc Prototype Pollution in @hapi/subtext
- GHSA-g8vp-6hv4-m67c Command Injection in entitlements
- GHSA-g8jc-mm3c-cwhj Malicious Package in reques
- GHSA-g7mw-5cq6-fv82 Cross-Site Scripting in wangeditor
- GHSA-g7h8-p22m-2rvx Prototype Pollution in flat-wrap
- GHSA-g753-jx37-7xwh ECDSA signature vulnerability of Minerva timing attack in jsrsasign
- GHSA-g64q-3vg8-8f93 Prototype Pollution in pez
- GHSA-g5q2-fcg9-j526 Malicious Package in hsf-clients
- GHSA-g4m3-rpxr-h7vg Malicious Package in mogodb-core
- GHSA-g3qw-9pgp-xpj4 Out-of-bounds Read in njwt
- GHSA-g37j-v5gh-g25c Malicious Package in js-shi3
- GHSA-g376-whg7-896m Directory Traversal in yjmyjmyjm
- GHSA-g336-c7wv-8hp3 Cross-Site Scripting in swagger-ui
- GHSA-g2c4-4m64-vxm3 Malicious Package in buffer-yor
- GHSA-fx6f-fpfv-5hmc Malicious Package in uploader-plugin
- GHSA-fwvq-x4j9-hr5f Malicious Package in bs58chekc
- GHSA-fwvp-x5gj-773j Malicious Package in react-server-native
- GHSA-fw76-p9p2-6pvf Malicious Package in serilize
- GHSA-fw4p-36j9-rrj3 Denial of Service in sequelize
- GHSA-fvwr-h9xh-m6wc Denial of Service in @commercial/subtext
- GHSA-frxq-v7fm-m4pv Malicious Package in requuest
- GHSA-fqw7-8v6m-2f86 Malicious Package in hulp
- GHSA-fpw3-x4xq-6vxq Malicious Package in wepack-cli
- GHSA-fpgg-r39h-3x5x Malicious Package in cxt
- GHSA-fpf2-pr3j-4cm3 Malicious Package in ecruve
- GHSA-fm7r-2pr7-rw2p Malicious Package in yeoman-genrator
- GHSA-fm4j-4xhm-xpwx Sandbox Breakout / Arbitrary Code Execution in sandbox
- GHSA-fj93-7wm4-8x2g Cross-Site Scripting in jquery-mobile
- GHSA-fgp6-8g62-qx6w Malicious Package in smartsearchwp
- GHSA-fgfj-rj24-mj7q Malicious Package in kraken-api
- GHSA-ff6g-gm92-rf32 Malicious Package in coinstirng
- GHSA-ff5x-w9wg-h275 Holder can generate proof of ownership for credentials it does not control in vp-toolkit
- GHSA-f8vf-6hwg-hw55 Malicious Package in bictore-lib
- GHSA-f8rq-m28h-8hxj Cross-Site Scripting in htmr
- GHSA-f8jj-45fj-44r6 Malicious Package in js-she3
- GHSA-f8h3-rqrm-47v9 Prototype Pollution in smart-extend
- GHSA-f884-gm86-cg3q PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
- GHSA-f7gc-6hcj-wc42 Malicious Package in path-to-regxep
- GHSA-f7g4-fm4c-54m9 Malicious Package in yeoman-genrator
- GHSA-f72h-wf57-7xwh Malicious Package in buffer-xo2
- GHSA-f64g-whxf-w8f2 Malicious Package in buffar-xor
- GHSA-f5cv-xrv9-r8w7 NoSQL injection in express-cart
- GHSA-f52g-6jhx-586p Denial of Service in handlebars
- GHSA-f3vw-587g-r29g Path Traversal in sapper
- GHSA-f3pc-c2gf-hvgw Malicious Package in requets
- GHSA-f366-4rvv-95x2 Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration
- GHSA-f294-27fc-wgj7 Malicious Package in buffer-zor
- GHSA-cxcf-78mr-wpg7 Malicious Package in oauth-validator
- GHSA-cvfm-xjc8-f2vm Denial of Service in @commercial/subtext
- GHSA-cv3v-7846-6pxm Unauthorized File Access in node-git-server
- GHSA-crr2-ph72-c52g Malicious Package in my-very-own-package
- GHSA-crpm-fm48-chj7 SQL Injection in resquel
- GHSA-crfh-jmv2-2f9v Malicious Package in singale
- GHSA-crf7-fvjx-863q Path Traversal in zero
- GHSA-cr67-78jr-j94p Local File Inclusion in domokeeper
- GHSA-cr5w-6rv4-r2qg Malicious Package in maleficent
- GHSA-cr56-66mx-293v Cross-Site Scripting in @toast-ui/editor
- GHSA-cr4x-w2v7-4mmf Malicious Package in bufver-xor
- GHSA-cq6h-w3mc-57f4 Information exposure via query strings in URL
- GHSA-cpgr-wmr9-qxv4 Cross-Site Scripting in serve
- GHSA-chh2-rvhg-wqwr Malicious Package in json-serializer
- GHSA-ch82-gqh6-9xj9 Prototype Pollution in get-setter
- GHSA-ch52-vgq2-943f Regular Expression Denial of Service in marked
- GHSA-cgvm-rvfv-c92r Malicious Package in ecuvre