Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 153 of 215.
- CVE-2020-15930 Cross-site Scripting in Joplin
- CVE-2020-1593 Windows Media Audio Decoder Remote Code Execution Vulnerability
- CVE-2020-15929 Path traversal in ortussolutions:testbox
- CVE-2020-15928 Path traversal in ortussolutions:testbox
- CVE-2020-15927 SQL injection in zohocorp:manageengine applications manager
- CVE-2020-15926 Cross-site scripting in rocket.chat:rocket.chat
- CVE-2020-15925 SQL injection in loway:queuemetrics
- CVE-2020-15924 SQL injection in midasolutions:eframework
- CVE-2020-15923 Path traversal in midasolutions:eframework
- CVE-2020-15922 Command injection in midasolutions:eframework
- CVE-2020-15921 Hardcoded credentials in midasolutions:eframework
- CVE-2020-15920 Command injection in midasolutions:eframework
- CVE-2020-1592 Windows Kernel Information Disclosure Vulnerability
- CVE-2020-15919 Cross-site scripting in midasolutions:eframework
- CVE-2020-15918 Cross-site scripting in midasolutions:eframework
- CVE-2020-15917 Other in claws-mail:claws-mail
- CVE-2020-15916 Command injection in tenda:ac15 firmware
- CVE-2020-15914 Cross-site scripting in ea:origin client
- CVE-2020-15912 Auth bypass in tesla:model 3 firmware
- CVE-2020-15910 Misconfiguration in solarwinds:n-central
- CVE-2020-1591 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
- CVE-2020-15909 Auth bypass in solarwinds:n-central
- CVE-2020-15908 Path traversal in cauldrondevelopment:c\!
- CVE-2020-15907 Cross-site scripting in mahara:mahara
- CVE-2020-15906 Auth bypass in tiki:tiki
- CVE-2020-15904 bsdiff4 out-of-bounds write via patch file
- CVE-2020-15903 Privilege escalation in nagios:nagios xi
- CVE-2020-15902 Cross-site scripting in nagios:nagios xi
- CVE-2020-15901 Command injection in nagios:nagios xi
- CVE-2020-15900 Memory corruption in artifex:ghostscript
- CVE-2020-1590 Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability
- CVE-2020-15899 Grin insufficient data validation
- CVE-2020-15898 Security feature bypass in arista:eos
- CVE-2020-15897 Denial of service in arista:eos
- CVE-2020-15896 Auth bypass in dlink:dap-1522 firmware
- CVE-2020-15895 Cross-site scripting in dlink:dir-816l firmware
- CVE-2020-15894 Missing authorization in dlink:dir-816l firmware
- CVE-2020-15893 Command injection in dlink:dir-816l firmware
- CVE-2020-15892 Memory corruption in dlink:dap-1520 firmware
- CVE-2020-15890 Memory corruption in canonical:ubuntu linux
- CVE-2020-1589 Windows Kernel Information Disclosure Vulnerability
- CVE-2020-15889 Memory corruption in lua:lua
- CVE-2020-15888 Memory corruption in lua:lua
- CVE-2020-15887 MunkiReport Software Update module is vulnerable to SQL injection
- CVE-2020-15886 MunkiReport reportdata module SQL injection vulnerability
- CVE-2020-15885 MunkiReport Cross-Site Scripting (XSS) Filter Bypass On Comment
- CVE-2020-15884 SQL injection in munkireport project:munkireport
- CVE-2020-15883 MunkiReport Managed Installs module Reflected Cross-Site Scripting (XSS) vulnerability
- CVE-2020-15882 Cross-site request forgery in munkireport project:munkireport
- CVE-2020-15881 MunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability
- CVE-2020-15879 Server-side request forgery in bitwarden:server
- CVE-2020-15878 An issue was discovered in LibreNMS 1.65.
- CVE-2020-15877 Exposure of Resource to Wrong Sphere in LibreNMS
- CVE-2020-15876 An issue was discovered in LibreNMS 1.65.
- CVE-2020-15875 SQL injection in LibreNMS
- CVE-2020-15874 An issue was discovered in LibreNMS 1.65.
- CVE-2020-15873 LibreNMS SQL Injection vulnerability
- CVE-2020-15871 Other in sonatype:nexus repository manager
- CVE-2020-15870 Cross-site scripting in sonatype:nexus repository manager
- CVE-2020-1587 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2020-15869 Cross-site scripting in sonatype:nexus repository manager
- CVE-2020-15868 Missing authorization in sonatype:nexus repository manager
- CVE-2020-15867 Code injection in gogs:gogs
- CVE-2020-15866 Memory corruption in debian:debian linux
- CVE-2020-15865 Code injection in stimulsoft:reports
- CVE-2020-15864 Cross-site scripting in quali:cloudshell
- CVE-2020-15863 Memory corruption in canonical:ubuntu linux
- CVE-2020-15862 Privilege escalation in canonical:ubuntu linux
- CVE-2020-15861 Privilege escalation in canonical:ubuntu linux
- CVE-2020-15860 Business logic in parallels:remote application server
- CVE-2020-15859 Use after free in debian:debian linux
- CVE-2020-15858 Path traversal in thalesgroup:bgs5 firmware
- CVE-2020-15855 Cross-site scripting in bodhi
- CVE-2020-15853 Denial of service in supybot-fedora
- CVE-2020-15852 Race condition in linux:linux kernel
- CVE-2020-15851 Missing authorization in nakivo:backup \& replication transporter
- CVE-2020-15850 Misconfiguration in nakivo:backup \& replication director
- CVE-2020-1585 Microsoft Windows Codecs Library Remote Code Execution Vulnerability
- CVE-2020-15849 SQL injection in re-desk:re\
- CVE-2020-15843 Misconfiguration in actfax:actfax
- CVE-2020-15842 Liferay Portal and Liferay DXP have Insecure Deserialization Vulnerability
- CVE-2020-15841 Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection
- CVE-2020-15840 Liferay Portal and Liferay DXP Bypass via Double Encoded URL
- CVE-2020-1584 Windows dnsrslvr.dll Elevation of Privilege Vulnerability
- CVE-2020-15839 Unrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP
- CVE-2020-15838 Privilege escalation in connectwise:automate
- CVE-2020-15836 Command injection in mofinetwork:mofi4500-4gxelte firmware
- CVE-2020-15835 Auth bypass in mofinetwork:mofi4500-4gxelte firmware
- CVE-2020-15834 Information disclosure in mofinetwork:mofi4500-4gxelte firmware
- CVE-2020-15833 Hardcoded credentials in mofinetwork:mofi4500-4gxelte firmware
- CVE-2020-15832 Other in mofinetwork:mofi4500-4gxelte firmware
- CVE-2020-15831 Cross-site scripting in jetbrains:teamcity
- CVE-2020-15830 Cross-site scripting in jetbrains:teamcity
- CVE-2020-1583 Microsoft Word Information Disclosure Vulnerability
- CVE-2020-15829 Information disclosure in jetbrains:teamcity
- CVE-2020-15828 Missing authorization in jetbrains:teamcity
- CVE-2020-15827 Security feature bypass in jetbrains:toolbox
- CVE-2020-15826 Privilege escalation in jetbrains:teamcity
- CVE-2020-15825 Privilege escalation in jetbrains:teamcity
- CVE-2020-15824 Privilege escalation in jetbrains:kotlin