Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 170 of 215.
- CVE-2020-14073 Cross-site scripting in paessler:prtg network monitor
- CVE-2020-14072 Command injection in mk-auth:mk-auth
- CVE-2020-14071 Cross-site scripting in mk-auth:mk-auth
- CVE-2020-14070 Auth bypass in mk-auth:mk-auth
- CVE-2020-1407 Memory corruption in Windows
- CVE-2020-14069 SQL injection in mk-auth:mk-auth
- CVE-2020-14068 SQL injection in mk-auth:mk-auth
- CVE-2020-14067 File upload in naviwebs:navigatecms
- CVE-2020-14066 File upload in icewarp:mail server
- CVE-2020-14065 File upload in icewarp:mail server
- CVE-2020-14064 Missing authorization in icewarp:mail server
- CVE-2020-14063 Cross-site scripting in tc custom javascript project:tc custom javascript
- CVE-2020-14062 Deserialization of untrusted data in Jackson Databind
- CVE-2020-14061 Deserialization of untrusted data in Jackson Databind
- CVE-2020-14060 Deserialization of untrusted data in Jackson Databind
- CVE-2020-1406 Privilege escalation in Windows
- CVE-2020-14059 Race condition in squid-cache:squid
- CVE-2020-14058 Null dereference in fedoraproject:fedora
- CVE-2020-14057 Path traversal in monstaftp:monsta ftp
- CVE-2020-14056 Server-side request forgery in monstaftp:monsta ftp
- CVE-2020-14055 Cross-site scripting in monstaftp:monsta ftp
- CVE-2020-14054 SQL injection in sokkia:gnr5 vanguard firmware
- CVE-2020-1405 Privilege escalation in Windows
- CVE-2020-14049 Command injection in rakuten:viber
- CVE-2020-14048 Missing authorization in zohocorp:manageengine servicedesk plus
- CVE-2020-14044 Codiad SSRF Vulnerability
- CVE-2020-14043 Codiad CSRF Vulnerability
- CVE-2020-14042 Codiad Cross-site Scripting Vulnerability
- CVE-2020-14040 golang.org/x/text Infinite loop
- CVE-2020-1404 Privilege escalation in Windows
- CVE-2020-14039 Security feature bypass in golang:go
- CVE-2020-14034 Memory corruption in meetecho:janus
- CVE-2020-14033 Memory corruption in meetecho:janus
- CVE-2020-14032 Privilege escalation in asrock:box-r1000 firmware
- CVE-2020-14031 Path traversal in ozeki:ozeki ng sms gateway
- CVE-2020-14030 Deserialization in ozeki:ozeki ng sms gateway
- CVE-2020-1403 Memory corruption in Internet Explorer 11
- CVE-2020-14029 XML external entity in ozeki:ozeki ng sms gateway
- CVE-2020-14028 Path traversal in ozeki:ozeki ng sms gateway
- CVE-2020-14027 Command injection in ozeki:ozeki ng sms gateway
- CVE-2020-14026 Code injection in ozeki:ozeki ng sms gateway
- CVE-2020-14025 Cross-site request forgery in ozeki:ozeki ng sms gateway
- CVE-2020-14024 Cross-site scripting in ozeki:ozeki ng sms gateway
- CVE-2020-14023 Server-side request forgery in ozeki:ozeki ng sms gateway
- CVE-2020-14022 File upload in ozeki:ozeki ng sms gateway
- CVE-2020-14021 Path traversal in ozeki:ozeki ng sms gateway
- CVE-2020-1402 Memory corruption in Windows
- CVE-2020-14019 rtslib-fb weak permissions for /etc/target/saveconfig.json file
- CVE-2020-14018 Cross-site scripting in naviwebs:navigate cms
- CVE-2020-14017 Information disclosure in naviwebs:navigate cms
- CVE-2020-14016 Information disclosure in naviwebs:navigate cms
- CVE-2020-14015 Auth bypass in naviwebs:navigate cms
- CVE-2020-14014 Cross-site scripting in naviwebs:navigate cms
- CVE-2020-14012 Cross-site scripting in enhancesoft:osticket
- CVE-2020-14011 Hardcoded credentials in lansweeper:lansweeper
- CVE-2020-14010 Cross-site scripting in laborator:xenon
- CVE-2020-1401 Memory corruption in Windows
- CVE-2020-14009 Security feature bypass in proofpoint:enterprise protection
- CVE-2020-14008 File upload in zohocorp:manageengine applications manager
- CVE-2020-14007 Cross-site scripting in solarwinds:orion network performance monitor
- CVE-2020-14006 Cross-site scripting in solarwinds:orion network performance monitor
- CVE-2020-14005 Code injection in solarwinds:orion network performance monitor
- CVE-2020-14004 Privilege escalation in icinga:icinga
- CVE-2020-14002 Information disclosure in fedoraproject:fedora
- CVE-2020-14001 Unintended read access in kramdown gem
- CVE-2020-14000 Remote Code Execution in scratch-vm
- CVE-2020-1400 Integer overflow in Windows
- CVE-2020-13999 Integer overflow in fedoraproject:fedora
- CVE-2020-13998 Information disclosure in citrix:xenapp
- CVE-2020-13997 Shopware database password is leaked to an unauthenticated users
- CVE-2020-13996 SQL injection in j2store:j2store
- CVE-2020-13995 Memory corruption in airforce:nitf extract utility
- CVE-2020-13994 File upload in mods-for-hesk:mods for hesk
- CVE-2020-13993 SQL injection in mods-for-hesk:mods for hesk
- CVE-2020-13992 Cross-site scripting in mods-for-hesk:mods for hesk
- CVE-2020-13991 Other in jerryscript:jerryscript
- CVE-2020-1399 Privilege escalation in Windows
- CVE-2020-13988 Integer overflow in contiki-ng:contiki-ng
- CVE-2020-13987 Memory corruption in open-iscsi project:open-iscsi
- CVE-2020-13986 Denial of service in contiki-os:contiki
- CVE-2020-13985 Memory corruption in contiki-os:contiki
- CVE-2020-13984 Denial of service in contiki-os:contiki
- CVE-2020-13980 OpenCart Cross-site Scripting
- CVE-2020-1398 Privilege escalation in Windows
- CVE-2020-13978 Command injection in monstra:monstra cms
- CVE-2020-13977 Code injection in fedoraproject:fedora
- CVE-2020-13976 Command injection in dd-wrt:dd-wrt
- CVE-2020-13974 Integer overflow in canonical:ubuntu linux
- CVE-2020-13973 Cross-site scripting in json-sanitizer
- CVE-2020-13972 Cross-site scripting in enghouse:web chat
- CVE-2020-13971 Shopware vulnerable to Cross-site Scripting
- CVE-2020-13970 Shopware vulnerable to SSRF
- CVE-2020-1397 Information disclosure in Windows
- CVE-2020-13969 Cross-site scripting in crk:business platform
- CVE-2020-13968 SQL injection in crk:business platform
- CVE-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS)
- CVE-2020-13964 Cross-site scripting in debian:debian linux
- CVE-2020-13963 Hardcoded credentials in soplanning:soplanning
- CVE-2020-13962 Denial of service in fedoraproject:fedora
- CVE-2020-13961 Improper Input Validation in strapi