Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 181 of 215.
- CVE-2020-12655 Denial of service in linux:linux kernel
- CVE-2020-12654 Memory corruption in linux:linux kernel
- CVE-2020-12653 Memory corruption in debian:debian linux
- CVE-2020-12652 Race condition in linux:linux kernel
- CVE-2020-12651 Integer overflow in vandyke:securecrt
- CVE-2020-1265 Privilege escalation in Windows 10 Version 1903 for 32-bit Systems
- CVE-2020-12649 Path traversal in gurbalib project:gurbalib
- CVE-2020-12648 Cross-site scripting vulnerability in TinyMCE
- CVE-2020-12647 Other in unisys:algol compiler
- CVE-2020-12646 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2020-12645 Denial of service in open-xchange:open-xchange appsuite
- CVE-2020-12644 Server-side request forgery in open-xchange:open-xchange appsuite
- CVE-2020-12643 Missing authorization in open-xchange:open-xchange appsuite
- CVE-2020-12642 XXE vulnerability in Launch import
- CVE-2020-12641 Roundcube Webmail Remote Code Execution
- CVE-2020-12640 Path traversal in opensuse:backports sle
- CVE-2020-1264 Privilege escalation in Windows
- CVE-2020-12639 Cross-site scripting in phplist:phplist
- CVE-2020-12638 Auth bypass in espressif:esp-idf
- CVE-2020-12637 Security feature bypass in zulipchat:zulip desktop
- CVE-2020-12635 Cross-site scripting in mageme:webforms pro m2
- CVE-2020-1263 Information disclosure in Windows
- CVE-2020-12629 Cross-site scripting in enhancesoft:osticket
- CVE-2020-12627 Hardcoded credentials in janeczku:calibre-web
- CVE-2020-12626 Cross-site request forgery in debian:debian linux
- CVE-2020-12625 Cross-site scripting in debian:debian linux
- CVE-2020-12624 Information disclosure in theleague:the league
- CVE-2020-12621 Auth bypass in teamwire:teamwire
- CVE-2020-12620 Command injection in pi-hole:pi-hole
- CVE-2020-1262 Privilege escalation in Windows
- CVE-2020-12619 Security feature bypass in freron:mailmate
- CVE-2020-12618 Security feature bypass in emclient:em client
- CVE-2020-12615 Privilege escalation in beyondtrust:privilege management for windows
- CVE-2020-12614 Privilege escalation in beyondtrust:privilege management for windows
- CVE-2020-12613 Privilege escalation in beyondtrust:privilege management for windows
- CVE-2020-12612 Privilege escalation in beyondtrust:privilege management for windows
- CVE-2020-1261 Information disclosure in Windows
- CVE-2020-12608 Misconfiguration in solarwinds:managed service provider patch management engine
- CVE-2020-12607 Improper Verification of Cryptographic Signature in fastecdsa
- CVE-2020-12606 SQL injection in dbsoft:sglac
- CVE-2020-12605 Denial of service in envoyproxy:envoy
- CVE-2020-12604 Denial of service in envoyproxy:envoy
- CVE-2020-12603 Denial of service in envoyproxy:envoy
- CVE-2020-1260 Memory corruption in Internet Explorer 11
- CVE-2020-12595 Information disclosure in Symantec Messaging Gateway (SMG)
- CVE-2020-12594 Privilege escalation in Symantec Messaging Gateway (SMG)
- CVE-2020-12593 Information disclosure in Symantec Endpoint Detection & Response (SEDR)
- CVE-2020-1259 Security feature bypass in Windows
- CVE-2020-1258 Privilege escalation in Windows
- CVE-2020-1257 Privilege escalation in Microsoft Visual Studio
- CVE-2020-1256 Windows GDI Information Disclosure Vulnerability
- CVE-2020-1255 Privilege escalation in Windows
- CVE-2020-1254 Privilege escalation in Windows
- CVE-2020-12530 Cross-site scripting in mbCONNECT24
- CVE-2020-1253 Privilege escalation in Windows
- CVE-2020-12529 Server-side request forgery in mbCONNECT24
- CVE-2020-12528 Missing authorization in mbCONNECT24
- CVE-2020-12527 Improper Access Validation in products of MB connect line and Helmholz
- CVE-2020-12526 BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server
- CVE-2020-12525 WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component
- CVE-2020-12524 Phoenix Contact BTP Touch Panels uncontrolled resource consumption
- CVE-2020-12523 Security feature bypass in FL MGUARD RS4004 TX/DTX (2701876)
- CVE-2020-12522 Command injection in Series PFC 100 (750-81xx/xxx-xxx)
- CVE-2020-12521 Denial of service in AXC F 1152 (1151412)
- CVE-2020-1252 Windows Remote Code Execution Vulnerability
- CVE-2020-12519 Privilege escalation in AXC F 1152 (1151412)
- CVE-2020-12518 Information disclosure in AXC F 1152 (1151412)
- CVE-2020-12517 Cross-site scripting in AXC F 1152 (1151412)
- CVE-2020-12516 WAGO: PLC families 750-88x and 750-352 prone to DoS attack
- CVE-2020-12514 Pepper+Fuchs Comtrol IO-Link Master NULL Pointer Dereference
- CVE-2020-12513 Pepper+Fuchs Comtrol IO-Link Master OS Command Injection
- CVE-2020-12512 Pepper+Fuchs Comtrol IO-Link Master Cross-Site Scripting
- CVE-2020-12511 Pepper+Fuchs Comtrol IO-Link Master Cross-Site Request Forgery
- CVE-2020-12510 Beckhoff: Privilege Escalation through TwinCat System
- CVE-2020-1251 Privilege escalation in Windows
- CVE-2020-12509 s::can moni::tools prone to path traversal in camera-file module
- CVE-2020-12508 s::can moni::tools prone to path traversal in image-relocator module
- CVE-2020-12507 s::can moni::tools autheticated SQL injection
- CVE-2020-12506 WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Versions <= FW03
- CVE-2020-12505 WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07
- CVE-2020-12504 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
- CVE-2020-12503 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
- CVE-2020-12502 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
- CVE-2020-12501 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
- CVE-2020-12500 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
- CVE-2020-1250 Win32k Information Disclosure Vulnerability
- CVE-2020-12499 PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.
- CVE-2020-12498 Phoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution
- CVE-2020-12497 Phoenix Contact Automation Worx <= 1.87: stack-based overflow
- CVE-2020-12496 Missing authorization in ORSG35 - Ecograph T Neutral/Private Label
- CVE-2020-12495 ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 1.x has improper privilege management
- CVE-2020-12494 Beckhoff: Etherleak in TwinCAT RT network driver
- CVE-2020-12493 Critical Vulnerability in SWARCO CPU LS4000
- CVE-2020-12492 Wifi information acquisition vulnerability in Framework Services
- CVE-2020-12491 Framework Information Disclosure Vulnerability
- CVE-2020-1249 Privilege escalation in Windows
- CVE-2020-12488 Broken Access Control Vulnerability in Jovi Smart Scene
- CVE-2020-12487 Command Execution Vulnerability in ABE service
- CVE-2020-12485 Memory corruption in The frame touch module
- CVE-2020-12484 Auth bypass in Wifi