Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 177 of 215.
- CVE-2020-13278 Reflected cross-site scripting in francoisjacquet/rosariosis
- CVE-2020-13277 Missing authorization in GitLab
- CVE-2020-13276 Business logic in GitLab
- CVE-2020-13275 Auth bypass in GitLab
- CVE-2020-13274 Denial of service in GitLab
- CVE-2020-13273 Denial of service in GitLab
- CVE-2020-13272 Auth bypass in GitLab
- CVE-2020-13271 Cross-site scripting in GitLab
- CVE-2020-13270 Missing authorization in GitLab
- CVE-2020-1327 Cross-site scripting in Azure DevOps Server
- CVE-2020-13269 Cross-site scripting in GitLab
- CVE-2020-13268 Information disclosure in GitLab
- CVE-2020-13267 Cross-site scripting in GitLab
- CVE-2020-13266 Missing authorization in GitLab
- CVE-2020-13265 Security feature bypass in GitLab
- CVE-2020-13264 Information disclosure in GitLab
- CVE-2020-13263 Missing authorization in GitLab
- CVE-2020-13262 Cross-site scripting in GitLab
- CVE-2020-13261 Information disclosure in GitLab
- CVE-2020-13260 Cross-site scripting in rad:secflow-1v firmware
- CVE-2020-1326 Cross-site scripting in Azure DevOps Server
- CVE-2020-13259 Cross-site request forgery in rad:secflow-1v firmware
- CVE-2020-13258 Cross-site scripting in Contentful
- CVE-2020-13254 Data leakage via cache key collision in Django
- CVE-2020-13253 Memory corruption in canonical:ubuntu linux
- CVE-2020-13252 Command Injection in Centreon
- CVE-2020-13250 Allocation of Resources Without Limits or Throttling in Hashicorp Consul
- CVE-2020-1325 Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
- CVE-2020-13249 Other in fedoraproject:fedora
- CVE-2020-13248 Cross-site scripting in boolebox:boolebox
- CVE-2020-13247 Code injection in boolebox:boolebox
- CVE-2020-13246 Denial of Service in Gitea
- CVE-2020-13245 Security feature bypass in netgear:r6120 firmware
- CVE-2020-13241 Microweber allows Unrestricted File Upload
- CVE-2020-13240 Dolibarr Stored Cross-site Scripting
- CVE-2020-1324 Privilege escalation in Windows
- CVE-2020-13239 Dolibarr Stored Cross-site Scripting via file upload
- CVE-2020-13238 Denial of service in mitsubishielectric:melsec iq-r00cpu firmware
- CVE-2020-13231 Cross-site request forgery in cacti:cacti
- CVE-2020-13230 Missing authorization in cacti:cacti
- CVE-2020-1323 Open redirect in Microsoft SharePoint Enterprise Server
- CVE-2020-13229 Auth bypass in sysax:multi server
- CVE-2020-13228 Cross-site scripting in sysax:multi server
- CVE-2020-13227 Information disclosure in sysax:multi server
- CVE-2020-13226 WSO2 API Manager vulnerable to SSRF
- CVE-2020-13225 Cross-site scripting in phpipam:phpipam
- CVE-2020-13224 Memory corruption in tp-link:nc200 firmware
- CVE-2020-13223 Information Disclosure in HashiCorp Vault
- CVE-2020-1322 Information disclosure in Microsoft 365 Apps for Enterprise for 32-bit Systems
- CVE-2020-1321 Memory corruption in Microsoft 365 Apps for Enterprise for 32-bit Systems
- CVE-2020-1320 Cross-site scripting in Microsoft SharePoint Enterprise Server
- CVE-2020-1319 Microsoft Windows Codecs Library Remote Code Execution Vulnerability
- CVE-2020-13186 Cross-site request forgery in - Cloud Access Connector - Cloud Access Connector Legacy
- CVE-2020-13185 Auth bypass in - Cloud Access Connector - Cloud Access Connector Legacy
- CVE-2020-13183 Cross-site scripting in Teradici PCoIP Management Console
- CVE-2020-1318 Cross-site scripting in Microsoft SharePoint Enterprise Server
- CVE-2020-13179 Information disclosure in - PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows
- CVE-2020-13178 Privilege escalation in - PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows
- CVE-2020-13177 Privilege escalation in - PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows
- CVE-2020-13176 Cross-site scripting in - Cloud Access Connector - Cloud Access Connector Legacy
- CVE-2020-13175 Path traversal in - Cloud Access Connector - Cloud Access Connector Legacy
- CVE-2020-13174 Other in - Management Console
- CVE-2020-13173 Race condition in PCoIP Standard Agent for Windows, PCoIP Graphics Agent for Windows
- CVE-2020-13170 Improper Input Validation in HashiCorp Consul
- CVE-2020-1317 Privilege escalation in Windows
- CVE-2020-13169 Cross-site scripting in solarwinds:orion platform
- CVE-2020-13168 Cross-site scripting in sysaid:sysaid on-premises
- CVE-2020-13167 Command injection in netsweeper:netsweeper
- CVE-2020-13166 Hardcoded credentials in mylittletools:mylittleadmin
- CVE-2020-13164 Denial of service in debian:debian linux
- CVE-2020-13163 Improper certificate validation in em-imap
- CVE-2020-13162 Race condition in pulsesecure:pulse secure desktop client
- CVE-2020-13160 Memory corruption in anydesk:anydesk
- CVE-2020-1316 Privilege escalation in Windows
- CVE-2020-13159 Command injection in articatech:artica proxy
- CVE-2020-13158 Path traversal in articatech:artica proxy
- CVE-2020-13157 NukeViet Cross-Site Request Forgery (CSRF)
- CVE-2020-13156 NukeViet Cross-Site Request Forgery (CSRF)
- CVE-2020-13155 NukeViet Cross-Site Request Forgery (CSRF)
- CVE-2020-13154 Missing authorization in zohocorp:manageengine servicedesk plus
- CVE-2020-13153 Cross-site scripting in misp-project:misp
- CVE-2020-13152 Denial of service in kde:amarok
- CVE-2020-13151 Code injection in aerospike:aerospike server
- CVE-2020-13150 Auth bypass in dlink:dsl-2750u firmware
- CVE-2020-1315 Information disclosure in Internet Explorer 11
- CVE-2020-13149 Misconfiguration in msi:dragon center
- CVE-2020-13146 Code injection in edx:open edx platform
- CVE-2020-13145 Cross-site scripting in edx:open edx platform
- CVE-2020-13144 Code injection in edx:open edx platform
- CVE-2020-13143 Memory corruption in canonical:ubuntu linux
- CVE-2020-1314 Privilege escalation in Windows
- CVE-2020-13136 Weak cryptography in dlink:dsp-w215 firmware
- CVE-2020-13135 Weak cryptography in dlink:dsp-w215 firmware
- CVE-2020-13134 Cross-site scripting in tufin:securechange
- CVE-2020-13133 Cross-site scripting in tufin:securechange
- CVE-2020-13132 Memory corruption in yubico:libykpiv
- CVE-2020-13131 Information disclosure in yubico:libykpiv
- CVE-2020-1313 Privilege escalation in Windows 10 Version 1903 for 32-bit Systems
- CVE-2020-13129 Information disclosure in heinekingmedia:stashcat
- CVE-2020-13128 Denial of service in gwtupload project:gwtupload