Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 158 of 215.
- CVE-2020-15346 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15345 Missing authorization in zyxel:cloudcnm secumanager
- CVE-2020-15344 Missing authorization in zyxel:cloudcnm secumanager
- CVE-2020-15343 Missing authorization in zyxel:cloudcnm secumanager
- CVE-2020-15342 Missing authorization in zyxel:cloudcnm secumanager
- CVE-2020-15341 Missing authorization in zyxel:cloudcnm secumanager
- CVE-2020-15340 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-1534 Windows Backup Service Elevation of Privilege Vulnerability
- CVE-2020-15339 Cross-site scripting in zyxel:cloudcnm secumanager
- CVE-2020-15338 Information disclosure in zyxel:cloudcnm secumanager
- CVE-2020-15337 Information disclosure in zyxel:cloudcnm secumanager
- CVE-2020-15336 Missing authorization in zyxel:cloudcnm secumanager
- CVE-2020-15335 Missing authorization in zyxel:cloudcnm secumanager
- CVE-2020-15334 Other in zyxel:cloudcnm secumanager
- CVE-2020-15333 SQL injection in zyxel:cloudcnm secumanager
- CVE-2020-15332 Misconfiguration in zyxel:cloudcnm secumanager
- CVE-2020-15331 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15330 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-1533 Windows WalletService Elevation of Privilege Vulnerability
- CVE-2020-15329 Misconfiguration in zyxel:cloudcnm secumanager
- CVE-2020-15328 Misconfiguration in zyxel:cloudcnm secumanager
- CVE-2020-15327 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15326 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15325 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15324 Hardcoded credentials in zyxel:cloud cnm secumanager
- CVE-2020-15323 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15322 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15321 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15320 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-1532 Windows InstallService Elevation of Privilege Vulnerability
- CVE-2020-15319 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15318 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15317 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15316 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15315 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15314 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15313 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-15312 Hardcoded credentials in zyxel:cloudcnm secumanager
- CVE-2020-1531 Windows Accounts Control Elevation of Privilege Vulnerability
- CVE-2020-15309 Information disclosure in wolfssl:wolfssl
- CVE-2020-15308 SQL injection in turnkeylinux:support incident tracker
- CVE-2020-15307 Cross-site scripting in nozominetworks:guardian
- CVE-2020-15306 Memory corruption in canonical:ubuntu linux
- CVE-2020-15305 Use after free in canonical:ubuntu linux
- CVE-2020-15304 Null dereference in fedoraproject:fedora
- CVE-2020-15303 XML external entity in infoblox:nios
- CVE-2020-15302 Security feature bypass in argent:recoverymanager
- CVE-2020-15301 Code injection in salesagility:suitecrm
- CVE-2020-15300 Open redirect in salesagility:suitecrm
- CVE-2020-1530 Windows Remote Access Elevation of Privilege Vulnerability
- CVE-2020-15299 Cross-site scripting in king-theme:kingcomposer
- CVE-2020-15297 Server-side request forgery in Bitdefender Update Server
- CVE-2020-15294 Race condition in Hypervisor Introspection
- CVE-2020-15293 Memory corruption in Bitdefender Hypervisor Introspection (VA-9336)
- CVE-2020-15292 Lack of validation on data read from guest memory in Bitdefender HVI (VA-9333)
- CVE-2020-1529 Windows GDI Elevation of Privilege Vulnerability
- CVE-2020-1528 Windows Radio Manager API Elevation of Privilege Vulnerability
- CVE-2020-15279 Scanning exclusion paths disclosure in BEST for Windows
- CVE-2020-15278 Unauthorized privilege escalation in Mod module
- CVE-2020-15277 Remote Code Execution in baserCMS
- CVE-2020-15276 Cross Site Scripting in baserCMS
- CVE-2020-15275 malicious SVG attachment causing stored XSS vulnerability in MoinMoin
- CVE-2020-15274 Stored XSS via search result in Wiki.js
- CVE-2020-15273 Cross-Site Scripting in baserCMS
- CVE-2020-15272 Shell-injection in git-tag-annotation GitHub action
- CVE-2020-15271 Shell Command Execution in lookatme
- CVE-2020-15270 Improper session expiration in Parse Server
- CVE-2020-1527 Windows Custom Protocol Engine Elevation of Privilege Vulnerability
- CVE-2020-15269 Expired token reuse in Spree
- CVE-2020-15266 Undefined behavior in Tensorflow
- CVE-2020-15265 Segfault in Tensorflow
- CVE-2020-15264 Privilege Escalation in Boxstarter
- CVE-2020-15263 XSS in platform
- CVE-2020-15262 Invalid integrity hashes in webpack-subresource-integrity
- CVE-2020-15261 Unquoted service path vulnerability on Veyon
- CVE-2020-15260 Existing TLS connections can be reused without checking remote hostname
- CVE-2020-1526 Windows Network Connection Broker Elevation of Privilege Vulnerability
- CVE-2020-15259 CSRF in Auth0 ad-ldap-connector
- CVE-2020-15258 Insecure use of shell.openExternal in Wire
- CVE-2020-15257 containerd-shim API Exposed to Host Network Containers
- CVE-2020-15256 Prototype pollution in object-path
- CVE-2020-15255 CSV injection in Anuko Time Tracker
- CVE-2020-15254 Undefined Behavior in bounded Crossbeam channel
- CVE-2020-15253 Stored XSS in Grocy
- CVE-2020-15252 RCE in XWiki
- CVE-2020-15251 Privilege Escalation in Channelmgnt plug-in for Sopel
- CVE-2020-15250 Information disclosure in JUnit4
- CVE-2020-1525 Media Foundation Memory Corruption Vulnerability
- CVE-2020-15249 Stored XSS by authenticated backend user with access to upload files
- CVE-2020-15248 Privilege escalation by backend users assigned to the default "Publisher" system role
- CVE-2020-15247 Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled.
- CVE-2020-15246 Local File Inclusion by unauthenticated users
- CVE-2020-15245 Email verification bypass in Sylius
- CVE-2020-15244 RCE in Magento
- CVE-2020-15243 WebApi Authentication attribute missing in Smartstore
- CVE-2020-15242 Open Redirect in Next.js
- CVE-2020-15241 Cross-Site Scripting in TYPO3 Fluid Engine
- CVE-2020-15240 Regression in JWT Signature Validation
- CVE-2020-1524 Windows Speech Shell Components Elevation of Privilege Vulnerability
- CVE-2020-15239 Directory Traversal in xmpp-http-upload