Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 159 of 215.
- CVE-2020-15238 Local privilege escalation Blueman
- CVE-2020-15237 Timing attack in Shrine
- CVE-2020-15236 Directory Traversal in Wiki.js
- CVE-2020-15235 Sensitive data exposure in RACTF
- CVE-2020-15234 Redirect URL matching ignores character casing
- CVE-2020-15233 OAuth2 Redirect URL validity does not respect query parameters and character casing for loopback addresses
- CVE-2020-15232 XML External Entity attack in mapfish-print
- CVE-2020-15231 Cross-site scripting attack in mapfish-print
- CVE-2020-15230 Arbitrary file read un Vapor
- CVE-2020-1523 Microsoft SharePoint Server Tampering Vulnerability
- CVE-2020-15229 Path traversal and files overwrite with unsquashfs
- CVE-2020-15228 Environment Variable Injection in GitHub Actions
- CVE-2020-15227 Remote Code Execution vulnerability
- CVE-2020-15226 SQL Injection in GLPI Search API
- CVE-2020-15225 Denial of Service vulnerability in django-filter
- CVE-2020-15224 Socket syscalls can leak enclave memory contents in Open Enclave
- CVE-2020-15223 Ignored storage errors on token revokation in ORY Fosite
- CVE-2020-15222 Replay of private_key_jwt possible in ORY Fosite
- CVE-2020-15221 XSS in the breadcrumbs
- CVE-2020-15220 Session fixation
- CVE-2020-1522 Windows Speech Runtime Elevation of Privilege Vulnerability
- CVE-2020-15219 SQL query displayed on portal error
- CVE-2020-15218 Admin pages are cached and can be embedded
- CVE-2020-15217 User data exposure in GLPI
- CVE-2020-15216 Signature Validation Bypass in goxmldsig
- CVE-2020-15215 Context isolation bypass in Electron
- CVE-2020-15214 Out of bounds write in tensorflow-lite
- CVE-2020-15213 Denial of service in tensorflow-lite
- CVE-2020-15212 Out of bounds access in tensorflow-lite
- CVE-2020-15211 Out of bounds access in tensorflow-lite
- CVE-2020-15210 Segmentation fault in tensorflow-lite
- CVE-2020-1521 Windows Speech Runtime Elevation of Privilege Vulnerability
- CVE-2020-15209 Null pointer dereference in tensorflow-lite
- CVE-2020-15208 Data corruption in tensorflow-lite
- CVE-2020-15207 Segfault and data corruption in tensorflow-lite
- CVE-2020-15206 Denial of Service in Tensorflow
- CVE-2020-15205 Data leak in Tensorflow
- CVE-2020-15204 Segfault in Tensorflow
- CVE-2020-15203 Denial of Service in Tensorflow
- CVE-2020-15202 Integer truncation in Shard API usage
- CVE-2020-15201 Heap buffer overflow in Tensorflow
- CVE-2020-15200 Segfault in Tensorflow
- CVE-2020-1520 Windows Font Driver Host Remote Code Execution Vulnerability
- CVE-2020-15199 Denial of Service in Tensorflow
- CVE-2020-15198 Heap buffer overflow in Tensorflow
- CVE-2020-15197 Denial of Service in Tensorflow
- CVE-2020-15196 Heap buffer overflow in Tensorflow
- CVE-2020-15195 Heap buffer overflow in Tensorflow
- CVE-2020-15194 Denial of Service in Tensorflow
- CVE-2020-15193 Memory corruption in Tensorflow
- CVE-2020-15192 Memory leak in Tensorflow
- CVE-2020-15191 Undefined behavior in Tensorflow
- CVE-2020-15190 Segfault in Tensorflow
- CVE-2020-1519 Windows UPnP Device Host Elevation of Privilege Vulnerability
- CVE-2020-15189 Remote Code Execution in SOY CMS
- CVE-2020-15188 Unauthenticated Remote Code Execution in SOY CMS
- CVE-2020-15187 Duplicate plugin entries in Helm
- CVE-2020-15186 Improper sanitization of plugin names in Helm
- CVE-2020-15185 Duplicated chart entries in Helm
- CVE-2020-15184 Aliases are never checked in Helm
- CVE-2020-15183 Reflected XSS leading to RCE in SoyCMS
- CVE-2020-15182 Cross-site Request Forgery leading to RCE in SOY CMS
- CVE-2020-15181 Admin account takeover in Alfresco Reset Password
- CVE-2020-15180 Command injection in mariadb
- CVE-2020-1518 Windows File Server Resource Management Service Elevation of Privilege Vulnerability
- CVE-2020-15179 HTML Injection in ScratchSig
- CVE-2020-15178 Potential XSS in PrestaShop contactform
- CVE-2020-15177 Unauthenticated Stored XSS in GLPI
- CVE-2020-15176 SQL injection in GLPI
- CVE-2020-15175 Unauthenticated File Deletion in GLPI
- CVE-2020-15174 Unpreventable top-level navigation in Electron
- CVE-2020-15173 Heap buffer overflow in ACCEL-PPP
- CVE-2020-15172 Remote Code Execution in Act module
- CVE-2020-15171 Users with SCRIPT rights can execute arbitrary code in XWiki
- CVE-2020-15170 Missing access control in apollo-adminservice
- CVE-2020-1517 Windows File Server Resource Management Service Elevation of Privilege Vulnerability
- CVE-2020-15169 XSS in Action View
- CVE-2020-15168 File size limit bypass in node-fetch
- CVE-2020-15167 Arbitrary code execution via configuration file in Miller
- CVE-2020-15166 Denial of Service in ZeroMQ
- CVE-2020-15165 Potentially tampered sources on Play Store for Chameleon Mini Live Debugger
- CVE-2020-15164 Authentication Bypass in Scratch Login (mediawiki-scratch-login)
- CVE-2020-15163 Invalid root may become trusted root in The Update Framework (TUF)
- CVE-2020-15162 Stored XSS in PrestaShop
- CVE-2020-15161 Potential XSS in PrestaShop
- CVE-2020-15160 Blind SQL Injection in PrestaShop
- CVE-2020-1516 Windows Work Folders Service Elevation of Privilege Vulnerability
- CVE-2020-15159 Cross Site Scripting leading to RCE in baserCMS
- CVE-2020-15158 Heap buffer overflow in libIEC61850
- CVE-2020-15157 containerd can be coerced into leaking credentials during image pull
- CVE-2020-15156 XSS due to lack of CSRF validation for replying/publishing
- CVE-2020-15155 Cross-Site Scripting in baserCMS
- CVE-2020-15154 Cross Site Scripting in baserCMS
- CVE-2020-15153 Unauthenticated SQL injection in Ampache
- CVE-2020-15152 Server-Side Request Forgery in ftp-srv
- CVE-2020-15151 Observable Timing Discrepancy in OpenMage LTS
- CVE-2020-15150 Remote Code Execution in paginator(hex)
- CVE-2020-1515 Windows Telephony Server Elevation of Privilege Vulnerability
- CVE-2020-15149 Account takeover in NodeBB
- CVE-2020-15148 Unsafe deserialization in Yii 2