Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 18 of 215.
- GHSA-4xg9-g7qj-jhg4 Malicious Package in comander
- GHSA-4x7w-frcq-v4m3 Path Traversal in @wturyn/swagger-injector
- GHSA-4x6x-782q-jfc4 Command Injection in node-wifi
- GHSA-4wcx-c9c4-89p2 Malicious Package in react-datepicker-plus
- GHSA-4vvp-x9h2-x2vf Path Traversal in public
- GHSA-4rx9-58m7-gr8w Malicious Package in css_transform_step
- GHSA-4rgj-8mq3-hggj Denial of Service in @hapi/subtext
- GHSA-4qqc-mp5f-ccv4 Command Injection in bestzip
- GHSA-4q8f-5xxj-946r Command Injection in addax
- GHSA-4q2f-8g74-qm56 Cross-Site Scripting in takeapeek
- GHSA-4pmg-jgm5-3jg6 Malicious Package in erquest
- GHSA-4m3p-x2hp-2pgx Malicious Package in bitcroe-lib
- GHSA-4m3j-h8f2-4xh4 Malicious Package in coinstrig
- GHSA-4jfq-q299-g4cr Malicious Package in reqquest
- GHSA-4j54-mmmv-hjpm Malicious Package in slush-fullstack-framework
- GHSA-4hq8-v42x-9wx3 Malicious Package in bs85check
- GHSA-4hm7-73ch-vm59 Malicious Package in buffer-8or
- GHSA-4hjg-w3ww-38c6 Malicious Package in tiar
- GHSA-4hfc-fv33-ph9p Malicious Package in sj-tw-abc
- GHSA-4fqg-89cc-5pv5 Malicious Package in sj-labc
- GHSA-4f9m-pxwh-68hg Cross-Site Scripting in swagger-ui
- GHSA-4c87-gg2q-fc6m Malicious Package in rc-calendar-jhorst
- GHSA-49mg-94fc-2fx6 Command Injection in npm-git-publish
- GHSA-49c6-3wr4-8jr4 Malicious Package in malicious-npm-package
- GHSA-4964-cjrr-jg97 Malicious Package in jqeury
- GHSA-48hw-37g6-3gw4 Malicious Package in mx-nested-menu
- GHSA-48gc-5j93-5cfq Path Traversal in serve
- GHSA-47qg-q58v-7vrp UNEDITABLE_SCHEMAS and UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES not respected by frontend service backend
- GHSA-46fh-8fc5-xcwx Prototype Pollution in lodash.defaultsdeep
- GHSA-4627-w373-375v Malicious Package in grunt-radical
- GHSA-45cp-hpc9-8347 Malicious Package in css_transform_support
- GHSA-44vf-8ffm-v2qh Sensitive Data Exposure in rails-session-decoder
- GHSA-43vf-2x6g-p2m5 Malicious Package in browserift
- GHSA-4363-x42f-xph6 Malicious Package in hw-trnasport-u2f
- GHSA-435c-qcpm-wjw5 Malicious Package in fs-extar
- GHSA-3wqh-h42r-x8fq Denial of Service in @hapi/content
- GHSA-3wjm-33mw-h388 Malicious Package in s3asy
- GHSA-3wh2-2pp3-2823 Malicious Package in simple-alipay
- GHSA-3mhm-jvqj-fvhg Malicious Package in js-sia3
- GHSA-3h9m-9g3g-5wqx Malicious Package in buffer-xov
- GHSA-3h99-v4qw-p2h5 Malicious Package in coinpayment
- GHSA-3gpc-w23c-w59w Sandbox Breakout / Arbitrary Code Execution in pitboss-ng
- GHSA-3fv6-q5xv-fhpw Malicious Package in coffee-project
- GHSA-3f97-rj68-2pjf Malicious Package in buffe2-xor
- GHSA-3f95-w5h5-fq86 Prototype Pollution in mergify
- GHSA-3cpj-mj3q-82wr Malicious Package in bs58chek
- GHSA-3cjv-4phw-gvvv Malicious Package in getcookies
- GHSA-38vq-cjh5-vw7x Malicious Package in nodes.js
- GHSA-38hx-3542-8fh3 Malicious code in `electorn`
- GHSA-388g-jwpg-x6j4 Cross-Site Scripting in swagger-ui
- GHSA-37vc-gwvp-6cgv Malicious Package in bitcoijns-lib
- GHSA-377f-vvrc-9wgg Malicious Package in zemen
- GHSA-36r8-9qq7-mh43 Malicious Package in we3b
- GHSA-36c4-4r89-6whg Prototype Pollution in @commercial/subtext
- GHSA-353r-3v84-9pjj Malicious Package in nothing-js
- GHSA-33gc-f8v9-v8hm Malicious Package in ladder-text-js
- GHSA-2xwp-m7mq-7q3r CLI does not correctly implement strict mode
- GHSA-2xw5-3767-qxvm Malicious Package in ng-ui-library
- GHSA-2w8q-69fh-9gq6 Malicious Package in bufger-xor
- GHSA-2vqq-jgxx-fxjc Malicious Package in motiv.scss
- GHSA-2r8f-2665-3gxq Malicious Package in froever
- GHSA-2r3v-q9x3-7g46 Link injection in SimpleSAMLphp
- GHSA-2q6w-rxf3-4wc9 Malicious Package in codify
- GHSA-2p99-6f47-8x9j Malicious Package in asnc
- GHSA-2p6g-gjp8-ggg9 personnummer/php vulnerable to Improper Input Validation
- GHSA-2p62-c4rm-mr72 Malicious Package in another-date-picker
- GHSA-2mxc-m4c3-wqhq Malicious Package in ruffer-xor
- GHSA-2mvq-xp48-4c77 Denial of Service in subtext
- GHSA-2mj8-pj3j-h362 Symlink reference outside of node_modules in bin-links
- GHSA-2m96-9w4j-wgv7 Prototype Pollution in lodash.merge
- GHSA-2jm5-2cqf-6vw9 Malicious Package in baes-x
- GHSA-2hqf-qqmq-pgpp Malicious Package in commander-js
- GHSA-2h3x-95c6-885r Malicious Package in river-mock
- GHSA-2ggq-vfcp-gwhj Cross-Site Scripting in @hapi/boom
- GHSA-2fwq-wx47-hm6x Malicious Package in bcion
- GHSA-2cf5-4w76-r9qv Arbitrary Code Execution in handlebars
- GHSA-29fh-xcjr-p7rx Malicious Package in web3-eht
- GHSA-28xx-8j99-m32j Malicious Package in nginxbeautifier
- GHSA-28r9-pq4c-wp3c personnummer/rust vulnerable to Improper Input Validation
- GHSA-28fw-88hq-6jmm Persistent XSS in shopping worlds
- GHSA-28f8-hqmc-7ph8 Malicious Package in ember-power-timepicker
- GHSA-28f4-mjfq-qrvf Malicious Package in buffes-xor
- GHSA-277p-xwpp-3jf7 Malicious Package in rrgod
- GHSA-25v4-mcx4-hh35 Cross-Site Scripting in atlasboard-atlassian-package
- GHSA-2563-83p7-f34p Malicious Package in requestt
- GHSA-255r-pghp-r5wh Malicious Package in hdeky
- GHSA-23vw-mhv5-grv5 Denial of Service in @hapi/hapi
- GHSA-22q9-hqm5-mhmc Cross-Site Scripting in swagger-ui
- GHSA-22h7-7wwg-qmgg Prototype Pollution in @hapi/hoek
- GHSA-226w-6hhj-69hp Malicious Package in cal_rd
- GHSA-224h-p7p5-rh85 Directory Traversal in wenluhong1
- DRUPAL-CORE-2020-002 The jQuery project released version 3.5.0, and as part of that, disclosed two security vulnerabilities that affect all prior versions.
- DRUPAL-CORE-2020-001 The Drupal project uses the third-party library [CKEditor](https://github.com/ckeditor/ckeditor4), which has released a [security improvemen
- DRUPAL-CONTRIB-2020-038 This module enables your users residing at a SAML 2.0 compliant Identity Provider to login to your Drupal website.
- DRUPAL-CONTRIB-2020-035 The File Example submodule within the Examples project does not properly sanitize certain filenames as described in [SA-CORE-2020-012](https
- DRUPAL-CONTRIB-2020-034 This module enables you login into any OAuth 2.0 compliant application using Drupal credentials.
- DRUPAL-CONTRIB-2020-033 The Group module enables you to hand out permissions on a smaller subset, section or community of your website.
- DRUPAL-CONTRIB-2020-032 The Group module enables you to hand out permissions on a smaller subset, section or community of your website.
- DRUPAL-CONTRIB-2020-030 This module enables you to hand out permissions on a smaller subset, section or community of your website.
- DRUPAL-CONTRIB-2020-029 The Modal form module is a toolset for quick start of using forms in modal windows.