Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 154 of 215.
- CVE-2020-15823 Server-side request forgery in jetbrains:youtrack
- CVE-2020-15822 Server-side request forgery in jetbrains:youtrack
- CVE-2020-15821 Missing authorization in jetbrains:youtrack
- CVE-2020-15820 Information disclosure in jetbrains:youtrack
- CVE-2020-1582 Microsoft Access Remote Code Execution Vulnerability
- CVE-2020-15819 Server-side request forgery in jetbrains:youtrack
- CVE-2020-15818 Information disclosure in jetbrains:youtrack
- CVE-2020-15817 Missing authorization in jetbrains:youtrack
- CVE-2020-15816 Code injection in westerndigital:wd discovery
- CVE-2020-15813 Improper Certificate Validation in Graylog
- CVE-2020-15811 Security feature bypass in canonical:ubuntu linux
- CVE-2020-15810 Other in canonical:ubuntu linux
- CVE-2020-1581 Microsoft Office Click-to-Run Elevation of Privilege Vulnerability
- CVE-2020-15809 Server-side request forgery in spinetix:diva firmware
- CVE-2020-15807 Null dereference in gnu:libredwg
- CVE-2020-15806 Denial of service in codesys:control for beaglebone
- CVE-2020-15803 Cross-site scripting in debian:debian linux
- CVE-2020-15802 Auth bypass in bluetooth:bluetooth core specification
- CVE-2020-15801 Security feature bypass in netapp:max data
- CVE-2020-15800 Memory corruption in SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- CVE-2020-1580 Microsoft Office SharePoint XSS Vulnerability
- CVE-2020-15799 Missing authorization in SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- CVE-2020-15798 Auth bypass in SIMATIC HMI Comfort Panels (incl. SIPLUS variants)
- CVE-2020-15797 Privilege escalation in DCA Vantage Analyzer
- CVE-2020-15796 Denial of service in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants)
- CVE-2020-15795 Memory corruption in APOGEE PXC Compact (BACnet)
- CVE-2020-15794 Information disclosure in Desigo Insight
- CVE-2020-15793 Other in Desigo Insight
- CVE-2020-15792 SQL injection in Desigo Insight
- CVE-2020-15791 Weak cryptography in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
- CVE-2020-15790 Information disclosure in Spectrum Power 4
- CVE-2020-1579 Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability
- CVE-2020-15789 Cross-site request forgery in Polarion Subversion Webclient
- CVE-2020-15788 Cross-site scripting in Polarion Subversion Webclient
- CVE-2020-15787 Auth bypass in SIMATIC HMI Unified Comfort Panels
- CVE-2020-15786 Auth bypass in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants)
- CVE-2020-15785 Information disclosure in Siveillance Video Client
- CVE-2020-15784 Information disclosure in Spectrum Power 4
- CVE-2020-15783 Denial of service in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
- CVE-2020-15782 Memory corruption in SIMATIC Drive Controller family
- CVE-2020-15781 Cross-site scripting in SICAM WEB firmware for SICAM A8000 RTUs
- CVE-2020-15780 Security feature bypass in canonical:ubuntu linux
- CVE-2020-1578 Windows Kernel Information Disclosure Vulnerability
- CVE-2020-15779 Path Traversal in socket.io-file
- CVE-2020-15778 Command injection in broadcom:fabric operating system
- CVE-2020-15777 Maven Extension plugin for Gradle Enterprise vulnerable to Deserialization of Untrusted Data
- CVE-2020-15776 Cross-site request forgery in gradle:enterprise
- CVE-2020-15775 Information disclosure in gradle:enterprise
- CVE-2020-15774 Auth bypass in gradle:enterprise
- CVE-2020-15773 Security feature bypass in gradle:enterprise
- CVE-2020-15772 XML external entity in gradle:enterprise
- CVE-2020-15771 Cross-site request forgery in gradle:enterprise
- CVE-2020-15770 Auth bypass in gradle:enterprise
- CVE-2020-1577 DirectWrite Information Disclosure Vulnerability
- CVE-2020-15769 Cross-site scripting in gradle:enterprise
- CVE-2020-15768 Information disclosure in gradle:enterprise
- CVE-2020-15767 Cross-site request forgery in gradle:enterprise
- CVE-2020-1576 Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2020-1575 Microsoft Office SharePoint XSS Vulnerability
- CVE-2020-15744 Stack-based buffer overflow leading to RCE in Victure Camera
- CVE-2020-1574 Microsoft Windows Codecs Library Remote Code Execution Vulnerability
- CVE-2020-15734 Same-origin policy vulnerability in Bitdefender Safepay
- CVE-2020-15733 URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)
- CVE-2020-15732 Security feature bypass in Antivirus Plus
- CVE-2020-15731 Local Privilege Escalation in Bitdefender Engines (VA-8953)
- CVE-2020-1573 Microsoft Office SharePoint XSS Vulnerability
- CVE-2020-15724 Privilege escalation in 360 Total Security
- CVE-2020-15723 Privilege escalation in 360 Total Security
- CVE-2020-15722 Privilege escalation in 360 Total Security
- CVE-2020-15721 Cross-site Scripting in RosarioSIS
- CVE-2020-15720 Security feature bypass in dogtagpki:dogtagpki
- CVE-2020-15719 Security feature bypass in mcafee:policy auditor
- CVE-2020-15718 Cross-site scripting in rosariosis:rosariosis
- CVE-2020-15717 Cross-site scripting in rosariosis:rosariosis
- CVE-2020-15716 Cross-site scripting in rosariosis:rosariosis
- CVE-2020-15715 Code injection in rconfig:rconfig
- CVE-2020-15714 SQL injection in rconfig:rconfig
- CVE-2020-15713 SQL injection in rconfig:rconfig
- CVE-2020-15712 Path traversal in rconfig:rconfig
- CVE-2020-15711 Cross-site request forgery in misp-project:misp
- CVE-2020-15710 Potential double-free in pulseaudio
- CVE-2020-1571 Windows Setup Elevation of Privilege Vulnerability
- CVE-2020-15709 add-apt-repository print ASNI terminal codes
- CVE-2020-15708 Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability
- CVE-2020-15707 GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.
- CVE-2020-15706 Use after free in grub2 in Ubuntu
- CVE-2020-15705 GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim
- CVE-2020-15704 pppd arbitrary file read information disclosure vulnerability
- CVE-2020-15703 aptdaemon allows unprivileged users to test for the presence of local files via the transaction Locale property
- CVE-2020-15702 TOCTOU in apport
- CVE-2020-15701 Unhandled exception in apport
- CVE-2020-15700 Cross-site request forgery in joomla:joomla\!
- CVE-2020-1570 Scripting Engine Memory Corruption Vulnerability
- CVE-2020-15699 Other in joomla:joomla\!
- CVE-2020-15698 Information disclosure in joomla:joomla\!
- CVE-2020-15697 Missing authorization in joomla:joomla\!
- CVE-2020-15696 Cross-site scripting in joomla:joomla\!
- CVE-2020-15695 Cross-site request forgery in joomla:joomla\!
- CVE-2020-15694 Other in nim-lang:nim
- CVE-2020-15693 Other in nim-lang:nim