Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 171 of 215.
- CVE-2020-13960 Misconfiguration in dlink:dir-600m firmware
- CVE-2020-1396 Privilege escalation in Windows
- CVE-2020-13959 Velocity Tools XSS Vulnerability
- CVE-2020-13958 Code injection in Apache OpenOffice
- CVE-2020-13957 Incorrect Authorization in Apache Solr
- CVE-2020-13956 Cross-site scripting in Apache HttpClient
- CVE-2020-13955 Missing Authentication for Critical Function in Apache Calcite
- CVE-2020-13954 Apache CXF Reflected XSS in the services listing page via the styleSheetPath
- CVE-2020-13953 Improper file downloads in Apache Tapestry
- CVE-2020-13952 Plaintext password leak in Apache Superset
- CVE-2020-13951 Denial of service in Apache OpenMeetings
- CVE-2020-13950 mod_proxy_http NULL pointer dereference
- CVE-2020-1395 Privilege escalation in Windows
- CVE-2020-13949 Uncontrolled Resource Consumption in Apache Thrift
- CVE-2020-13948 Apache Superset OS Command Injection
- CVE-2020-13947 Cross-site scripting (XSS) in Apache ActiveMQ
- CVE-2020-13946 Man-in-the-middle attack in Apache Cassandra
- CVE-2020-13945 Auth bypass in Apache APISIX
- CVE-2020-13944 Apache Airflow Cross-site Scripting
- CVE-2020-13943 Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
- CVE-2020-13942 Remote Code Execution in Apache Unomi
- CVE-2020-13941 Improper Input Validation in Apache Solr
- CVE-2020-13940 Improper Restriction of XML External Entity Reference in Apache NiFi
- CVE-2020-1394 Privilege escalation in Windows
- CVE-2020-13938 Improper Handling of Insufficient Privileges
- CVE-2020-13937 Authentication bypass in Apache Kylin
- CVE-2020-13936 Velocity Sandbox Bypass
- CVE-2020-13935 Infinite Loop in Apache Tomcat
- CVE-2020-13934 Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
- CVE-2020-13933 Authentication bypass in Apache Shiro
- CVE-2020-13932 Cross-site Scripting (XSS) in Apache ActiveMQ Artemis
- CVE-2020-13931 Remote code execution in Apache TomEE
- CVE-2020-1393 Privilege escalation in Microsoft Visual Studio
- CVE-2020-13929 Notebook permissions bypass
- CVE-2020-13928 Cross-site scripting in Apache Atlas
- CVE-2020-13927 Apache Airflow's Experimental API Authentication Bypass
- CVE-2020-13926 SQL Injection in Kylin
- CVE-2020-13925 Command Injection in Kylin
- CVE-2020-13924 Path traversal in Apache Ambari
- CVE-2020-13923 Missing authorization in Apache OFBiz
- CVE-2020-13922 Apache DolphinScheduler (incubating) Permission vulnerability
- CVE-2020-13921 SQL Injection in Apache SkyWalking
- CVE-2020-13920 Improper Authentication in Apache ActiveMQ
- CVE-2020-1392 Privilege escalation in Windows
- CVE-2020-13919 Command injection in ruckuswireless:unleashed firmware
- CVE-2020-13918 Missing authorization in ruckuswireless:unleashed firmware
- CVE-2020-13917 Command injection in ruckuswireless:unleashed firmware
- CVE-2020-13916 Memory corruption in ruckuswireless:unleashed firmware
- CVE-2020-13915 Missing authorization in ruckuswireless:unleashed firmware
- CVE-2020-13914 Denial of service in ruckuswireless:unleashed firmware
- CVE-2020-13913 Cross-site scripting in ruckuswireless:unleashed firmware
- CVE-2020-13912 Misconfiguration in solarwinds:advanced monitoring agent
- CVE-2020-13911 Cross-site scripting in your online shop project:your online shop
- CVE-2020-13910 Memory corruption in pengutronix:barebox
- CVE-2020-1391 Information disclosure in Windows 10 Version 1903 for 32-bit Systems
- CVE-2020-13909 Critical severity vulnerability in Ignition
- CVE-2020-13906 Memory corruption in irfanview:irfanview
- CVE-2020-13905 Memory corruption in irfanview:irfanview
- CVE-2020-13904 Use after free in canonical:ubuntu linux
- CVE-2020-13902 Memory corruption in imagemagick:imagemagick
- CVE-2020-13901 Memory corruption in meetecho:janus
- CVE-2020-13900 Null dereference in meetecho:janus
- CVE-2020-1390 Privilege escalation in Windows
- CVE-2020-13899 Information disclosure in meetecho:janus
- CVE-2020-13898 Null dereference in meetecho:janus
- CVE-2020-13897 HESK before 3.1.10 allows reflected XSS.
- CVE-2020-13896 Information disclosure in maipu:mp1800x-50 firmware
- CVE-2020-13895 Weak cryptography in p5-crypt-perl project:p5-crypt-perl
- CVE-2020-13894 Path traversal in dext5:dext5
- CVE-2020-13893 Cross-site scripting in sage:easypay
- CVE-2020-13892 Cross-site scripting in themeboy:sportspress
- CVE-2020-13891 Information disclosure in mattermost:mattermost
- CVE-2020-13890 Cross-site scripting in laborator:neon
- CVE-2020-1389 Information disclosure in Windows
- CVE-2020-13889 Cross-site scripting in bludit:bludit
- CVE-2020-13888 Cross-site scripting in kordil edms project:kordil edms
- CVE-2020-13887 File upload in kordil edms project:kordil edms
- CVE-2020-13886 Path traversal in intelbras:tip200 firmware
- CVE-2020-13885 Privilege escalation in citrix:workspace app
- CVE-2020-13884 Privilege escalation in citrix:workspace app
- CVE-2020-13883 XML external entity in wso2:api manager
- CVE-2020-13882 Race condition in cisofy:lynis
- CVE-2020-13881 Information disclosure in arista:cloudvision portal
- CVE-2020-13880 Memory corruption in irfanview:b3d
- CVE-2020-1388 Privilege escalation in Windows
- CVE-2020-13879 Memory corruption in irfanview:b3d
- CVE-2020-13878 Memory corruption in irfanview:b3d
- CVE-2020-13877 SQL injection in resourcexpress:meeting monitor
- CVE-2020-13873 SQL injection in codologic:codoforum
- CVE-2020-13872 Auth bypass in royalapps:royal ts
- CVE-2020-13871 Use after free in debian:debian linux
- CVE-2020-13870 Comments plugin stored Cross-site Scripting (XSS) via an asset volume name
- CVE-2020-1387 Privilege escalation in Windows
- CVE-2020-13869 Comments plugin stored Cross-site Scripting via a guest name
- CVE-2020-13868 Comments plugin Cross-Site Request Forgery (CSRF)
- CVE-2020-13867 Misconfiguration in fedoraproject:fedora
- CVE-2020-13866 Misconfiguration in qbik:wingate
- CVE-2020-13865 Cross-site scripting in elementor:elementor page builder
- CVE-2020-13864 Cross-site scripting in elementor:elementor page builder
- CVE-2020-13863 Other in mitel:micollab