Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 17 of 215.
- GHSA-7xc4-793x-25jp Malicious Package in bpi66
- GHSA-7x92-2j68-h32c Directory Traversal in featurebook
- GHSA-7wwv-vh3v-89cq ReDOS vulnerabities: multiple grammars
- GHSA-7wgh-5q4q-6wx5 Malicious Package in 1337qq-js
- GHSA-7w7c-867m-4mqc Malicious Package in rceat
- GHSA-7r9x-hr76-jr96 Command Injection in giting
- GHSA-7r5f-7qr4-pf6q Sandbox Breakout / Arbitrary Code Execution in notevil
- GHSA-7qg7-6g3g-8vxg Malicious Package in bwffer-xor
- GHSA-7p6w-x2gr-rrf8 ag-grid Cross-Site Scripting vulnerability
- GHSA-7j93-5m2h-rvjx Malicious Package in bconi
- GHSA-7hx8-2rxv-66xv Denial of Service in hapi
- GHSA-7frr-c83r-fm22 Malicious Package in buffez-xor
- GHSA-7cvf-p83w-48q6 Malicious Package in beffer-xor
- GHSA-78p3-96hc-3j47 Malicious Package in jquery-airload
- GHSA-788m-pj96-7w2c Cross-Site Scripting in fomantic-ui
- GHSA-785g-gx74-gr39 Malicious Package in js-wha3
- GHSA-779f-wgxg-qr8f Prototype Pollution in lodash.mergewith
- GHSA-76xq-58hj-vwm2 Malicious Package in test-module-a
- GHSA-76wf-2xcf-6wmx Malicious Package in ngx-pica
- GHSA-76qf-6mvw-c5hm Malicious Package in js-base64-int
- GHSA-769f-539v-f5jg PrestaShop gamification module ZIP archives were vulnerable from CVE-2017-9841
- GHSA-7696-qr5q-pg37 Malicious Package in zs-sha3
- GHSA-766v-7gjx-55hf Malicious Package in js-shq3
- GHSA-762c-v946-pf25 Malicious Package in bpi39
- GHSA-7543-mr7h-6v86 Improper Authorization in googleapis
- GHSA-74hv-qjjq-h7g5 datasette-graphql leaks details of the schema of private database files
- GHSA-74hh-4rcv-pp27 Malicious Package in bitconijs-lib
- GHSA-73wv-v82c-xmqv Malicious Package in buffep-xor
- GHSA-73v8-v6g4-vrpm Arbitrary File Overwrite in decompress-zip
- GHSA-73hr-6785-f5p8 Malicious Package in donotinstallthis
- GHSA-73c6-vwjh-g3qh Malicious Package in crpyto-js
- GHSA-725f-3pw7-rq6x Malicious Package in 8.9.4
- GHSA-724c-6vrf-99rq Sensitive Data Exposure in loopback
- GHSA-6xm4-p6r2-mwrc Malicious Package in cuffer-xor
- GHSA-6xg2-cf6h-x4v8 Malicious Package in buffer-por
- GHSA-6x33-pw7p-hmpq Denial of Service in http-proxy
- GHSA-6r3c-8xf3-ggrr Directory traversal outside of SENDFILE_ROOT in django-sendfile2
- GHSA-6qqj-rx4w-r3cj CSRF Vulnerability in jquery-ujs
- GHSA-6qgx-f452-7699 Malicious Package in superhappyfuntime
- GHSA-6qc7-jgq7-34rf Malicious Package in exprss
- GHSA-6mrq-7r7m-hh4p Malicious Package in hs-sha3
- GHSA-6m6m-j2hm-pxrg Malicious Package in cicada-render
- GHSA-6gv9-7q4g-pmvm Persistent XSS in customer module in Shopware
- GHSA-6fh5-8wq8-w3wr Prototype Pollution in unflatten
- GHSA-6fcr-9h9g-23fq Denial of Service in ipfs-bitswap
- GHSA-6f93-xj8r-jp82 Malicious Package in bunfer-xor
- GHSA-6chw-6frg-f759 Regular Expression Denial of Service in Acorn
- GHSA-6c37-2rw5-9j7x Malicious Package in requesst
- GHSA-69r6-7h4f-9p7q Malicious Package in discord.js-user
- GHSA-69mf-2cw2-38m8 Malicious Package in js-shc3
- GHSA-692h-g37c-qv44 Malicious Package in sj-tw-sec
- GHSA-6879-xr95-5gf4 Malicious Package in malicious-do-not-install
- GHSA-67mp-pcv9-vvq6 Malicious Package in jr-sha3
- GHSA-674r-xx4c-gj7x Malicious Package in sb58
- GHSA-66mv-xh68-h6v2 Denial of Service in @commercial/hapi
- GHSA-65xx-c85x-wg76 Command Injection in plotter
- GHSA-65m9-m259-7jqw Improper Authorization in react-oauth-flow
- GHSA-65j7-66p7-9xgf Malicious Package in font-scrubber
- GHSA-6584-gfwm-3vc3 Malicious Package in budfer-xor
- GHSA-657v-jjf8-83gh Malicious Package in jsmsha3
- GHSA-6343-m2qr-66gf Malicious Package in js-sja3
- GHSA-629c-j867-3v45 Malicious Package in bitcoisnj-lib
- GHSA-5x8q-gj67-rhf2 Malicious Package in discord_debug_log
- GHSA-5x7p-gm79-383m Malicious Package in regenraotr
- GHSA-5wq6-v5cw-jvfr Malicious Package in js-shas
- GHSA-5w4r-wwc3-6qcp Malicious Package in precode.js
- GHSA-5vj8-3v2h-h38v Remote Code Execution in next
- GHSA-5v7r-jg9r-vq44 Insecure Cryptography Algorithm in simple-crypto-js
- GHSA-5q58-x5h2-v5rx Authenticated Privilege Escalation
- GHSA-5p98-wpc9-g498 Server-Side Request Forgery in html-pdf-chrome
- GHSA-5p28-63mc-cgr9 Cross-Site Scripting bypass in html-purify
- GHSA-5mrr-rgp6-x4gr Command Injection in marsdb
- GHSA-5mm9-55c9-p5r7 Malicious Package in mogoose
- GHSA-5jgp-pg4f-q8vj Malicious Package in node-ftp
- GHSA-5ggx-g294-qj3q Malicious Package in buffeb-xor
- GHSA-5g6j-8hv4-vfgj Cross-Site Scripting in node-red
- GHSA-5fm9-jmv7-fcx5 Malicious Package in asynnc
- GHSA-5ff8-jcf9-fw62 Cross-Site Scripting in markdown-it-katex
- GHSA-5cp4-xmrw-59wf XSS via JQLite DOM manipulation functions in AngularJS
- GHSA-59x8-7wx6-4hj9 Malicious Package in secure_identity_login_module
- GHSA-5947-m4fg-xhqg Prototype Pollution in lodash.mergewith
- GHSA-588m-9qg5-35pq Reverse Tabnabbing in quill
- GHSA-5854-jvxx-2cg9 Denial of Service in content
- GHSA-5822-pw57-vv37 XSS vulnerability when listing users on add & modify server pages.
- GHSA-56r9-v65c-34jm Malicious Package in radicjs
- GHSA-5645-gc7h-98h8 Malicious Package in react-dates-sc
- GHSA-563h-697m-j7x5 Malicious Package in device-mqtt
- GHSA-563h-49v8-g7x4 Malicious Package in ks-sha3
- GHSA-5635-9mvj-r6hp Malicious Package in vue-backbone
- GHSA-5634-rv46-48jf Cross-Site Scripting in bleach
- GHSA-559q-92vx-xvjp Malicious Package in qingting
- GHSA-54qm-37qr-w5wq Sandbox Breakout / Arbitrary Code Execution in veval
- GHSA-54cr-gv8w-8324 Malicious Package in xoc
- GHSA-53mj-mc38-q894 Remote Memory Exposure in openwhisk
- GHSA-53jx-4wwh-gcqj Malicious Package in angular-location-update
- GHSA-536f-268f-6gxc Malicious Package in buffermxor
- GHSA-533p-g2hq-qr26 Command Injection in treekill
- GHSA-5327-gfq5-8f4m Malicious Package in buffer-xmr
- GHSA-52c9-458g-whrf Malicious Package in js-3ha3
- GHSA-4xgp-xrg3-c73w Malicious Package in commqnder