Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 175 of 215.
- CVE-2020-13498 Memory corruption in OpenUSD
- CVE-2020-13497 Memory corruption in Pixar
- CVE-2020-13496 Memory corruption in Pixar
- CVE-2020-13495 Memory corruption in OpenUSD
- CVE-2020-13494 Memory corruption in Pixar
- CVE-2020-13493 Memory corruption in Pixar
- CVE-2020-1349 Memory corruption in Microsoft 365 Apps for Enterprise for 32-bit Systems
- CVE-2020-13487 bbPress stored Cross-Site Scripting (XSS) vulnerability in the Forum creation section
- CVE-2020-13486 Knock Knock plugin Open redirection vulnerability
- CVE-2020-13485 Knock Knock plugin IP Whitelist bypass via an X-Forwarded-For HTTP header
- CVE-2020-13484 Server-side request forgery in bitrix24:bitrix24
- CVE-2020-13483 Cross-site scripting in bitrix24:bitrix24
- CVE-2020-13482 Improper Certificate Validation in EM-HTTP-Request
- CVE-2020-13481 Certain Lexmark products through 2020-05-25 allow XSS which allows an attacker to obtain session credentials and other sensitive information.
- CVE-2020-13480 Cross-site scripting in verint:workforce optimization
- CVE-2020-1348 Information disclosure in Windows
- CVE-2020-13476 Cross-site scripting in nchsoftware:express invoice
- CVE-2020-13474 Privilege escalation in nchsoftware:express accounts
- CVE-2020-13473 Information disclosure in nchsoftware:express accounts
- CVE-2020-13472 Security feature bypass in gigadevice:gd32f103 firmware
- CVE-2020-13471 Security feature bypass in apexmic:apm32f103 firmware
- CVE-2020-13470 Information disclosure in gigadevice:gd32f103 firmware
- CVE-2020-1347 Privilege escalation in Windows
- CVE-2020-13469 Security feature bypass in gigadevice:gd32vf103 firmware
- CVE-2020-13468 Security feature bypass in gigadevice:gd32f130 firmware
- CVE-2020-13467 Security feature bypass in cksic:cks32f103 firmware
- CVE-2020-13466 Security feature bypass in st:stm32f103 firmware
- CVE-2020-13465 Security feature bypass in gigadevice:gd32f103 firmware
- CVE-2020-13464 Security feature bypass in cksic:cks32f103 firmware
- CVE-2020-13463 Security feature bypass in apexmic:apm32f103 firmware
- CVE-2020-13462 Missing authorization in tufin:securetrack
- CVE-2020-13461 Information disclosure in tufin:securetrack
- CVE-2020-13460 Cross-site request forgery in tufin:securetrack
- CVE-2020-1346 Privilege escalation in Windows
- CVE-2020-13459 Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action
- CVE-2020-13458 Image Resizer Cross-Site Request Forgery (CSRF)
- CVE-2020-13452 Misconfiguration in thecodingmachine:gotenberg
- CVE-2020-13451 Other in thecodingmachine:gotenberg
- CVE-2020-13450 Path traversal in thecodingmachine:gotenberg
- CVE-2020-1345 Microsoft Office SharePoint XSS Vulnerability
- CVE-2020-13449 Path traversal in thecodingmachine:gotenberg
- CVE-2020-13448 Command injection in quickbox:quickbox
- CVE-2020-13445 Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution
- CVE-2020-13444 Liferay Portal and Liferay DXP Fails to Sanitize API Data
- CVE-2020-13443 File upload in expressionengine:expressionengine
- CVE-2020-13442 File upload in dext5:dext5
- CVE-2020-13440 Memory corruption in rockcarry:ffjpeg
- CVE-2020-1344 Privilege escalation in Windows
- CVE-2020-13439 Memory corruption in rockcarry:ffjpeg
- CVE-2020-13438 Memory corruption in rockcarry:ffjpeg
- CVE-2020-13435 Null dereference in fedoraproject:fedora
- CVE-2020-13434 Integer overflow in apple:icloud
- CVE-2020-13433 SQL injection in adminpanel project:adminpanel
- CVE-2020-13432 Memory corruption in rejetto:http file server
- CVE-2020-13431 Privilege escalation in geti2p:i2p
- CVE-2020-13430 Grafana XSS via the OpenTSDB datasource
- CVE-2020-1343 Information disclosure in Microsoft Visual Studio Code Live Share extension
- CVE-2020-13429 Cross-site scripting in grafana:piechart-panel
- CVE-2020-13428 Memory corruption in debian:debian linux
- CVE-2020-13427 Cross-site scripting in victorcms project:victorcms
- CVE-2020-13426 Cross-site request forgery in bdtask:multi-scheduler
- CVE-2020-13425 Missing authorization in thetrackr:trackr firmware
- CVE-2020-13424 Information disclosure in xcloner:xcloner
- CVE-2020-13423 Cross-site scripting in form builder for magento 2 project:form builder for magento 2
- CVE-2020-13422 Missing authorization in openiam:openiam
- CVE-2020-13421 Missing authorization in openiam:openiam
- CVE-2020-13420 Code injection in openiam:openiam
- CVE-2020-1342 Information disclosure in Microsoft 365 Apps for Enterprise for 32-bit Systems
- CVE-2020-13419 Path traversal in openiam:openiam
- CVE-2020-13418 Cross-site scripting in openiam:openiam
- CVE-2020-13417 Privilege escalation in aviatrix:controller
- CVE-2020-13416 Cross-site request forgery in aviatrix:controller
- CVE-2020-13415 Auth bypass in aviatrix:controller
- CVE-2020-13414 Hardcoded credentials in aviatrix:controller
- CVE-2020-13413 Information disclosure in aviatrix:controller
- CVE-2020-13412 Cross-site request forgery in aviatrix:controller
- CVE-2020-13410 Improper exception handling in Aedes
- CVE-2020-13409 Cross-site scripting in tufin:securetrack
- CVE-2020-13408 Cross-site scripting in tufin:securetrack
- CVE-2020-13407 Cross-site scripting in tufin:securetrack
- CVE-2020-13405 Microweber Discloses Sensitive Information
- CVE-2020-13404 Command injection in quadra-informatique:atos\/sips
- CVE-2020-13401 Improper Input Validation in Docker Engine
- CVE-2020-1340 Cross-site scripting in NuGetGallery
- CVE-2020-13398 Memory corruption in canonical:ubuntu linux
- CVE-2020-13397 Memory corruption in canonical:ubuntu linux
- CVE-2020-13396 Memory corruption in canonical:ubuntu linux
- CVE-2020-13394 Memory corruption in tendacn:ac15 firmware
- CVE-2020-13393 Memory corruption in tendacn:ac15 firmware
- CVE-2020-13392 Memory corruption in tendacn:ac15 firmware
- CVE-2020-13391 Memory corruption in tendacn:ac15 firmware
- CVE-2020-13390 Memory corruption in tendacn:ac15 firmware
- CVE-2020-1339 Windows Media Remote Code Execution Vulnerability
- CVE-2020-13389 Memory corruption in tendacn:ac15 firmware
- CVE-2020-13388 OS Command Injection in jw.util
- CVE-2020-13387 Denial of service in pexip:pexip infinity
- CVE-2020-13386 Misconfiguration in smartdraw:smartdraw 2020
- CVE-2020-13384 File upload in monstra:monstra
- CVE-2020-13383 Path traversal in os4ed:opensis
- CVE-2020-13382 Missing authorization in os4ed:opensis