Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 184 of 215.
- CVE-2020-12270 Weak cryptography in bluezone:bluezone
- CVE-2020-1227 Microsoft Office SharePoint XSS Vulnerability
- CVE-2020-12268 Memory corruption in artifex:jbig2dec
- CVE-2020-12267 Use after free in qt:qt
- CVE-2020-12266 Missing authorization in wavlink:jetstream ac3000 firmware
- CVE-2020-12265 Path Traversal in decompress
- CVE-2020-12262 Cross-site scripting in intelbras:tip200 firmware
- CVE-2020-12261 Cross-site scripting in opmantek:open-audit
- CVE-2020-1226 Use after free in Microsoft 365 Apps for Enterprise for 32-bit Systems
- CVE-2020-12259 Cross-site scripting in rconfig:rconfig
- CVE-2020-12258 Auth bypass in rconfig:rconfig
- CVE-2020-12257 Cross-site request forgery in rconfig:rconfig
- CVE-2020-12256 Cross-site scripting in rconfig:rconfig
- CVE-2020-12255 File upload in rconfig:rconfig
- CVE-2020-12254 Privilege escalation in avira:antivirus
- CVE-2020-12252 File upload in gigamon:gigavue
- CVE-2020-12251 Path traversal in gigamon:gigavue
- CVE-2020-1225 Use after free in Microsoft 365 Apps for Enterprise for 32-bit Systems
- CVE-2020-12248 Memory corruption in foxitsoftware:phantompdf
- CVE-2020-12247 Memory corruption in foxitsoftware:phantompdf
- CVE-2020-12246 Command injection in beeline:smart box firmware
- CVE-2020-12245 Grafana XSS in header column rename
- CVE-2020-12244 Security feature bypass in debian:debian linux
- CVE-2020-12243 Denial of service in apple:mac os x
- CVE-2020-12242 Privilege escalation in valvesoftware:source
- CVE-2020-1224 Microsoft Excel Information Disclosure Vulnerability
- CVE-2020-1223 Code injection in Microsoft Word for Android
- CVE-2020-1222 Memory corruption in Windows
- CVE-2020-1220 Open redirect in Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1607 for 32-bit Systems
- CVE-2020-1219 Memory corruption in ChakraCore
- CVE-2020-1218 Microsoft Word Remote Code Execution Vulnerability
- CVE-2020-1217 Information disclosure in Windows
- CVE-2020-1216 Memory corruption in Internet Explorer 11
- CVE-2020-1215 Memory corruption in Internet Explorer 11
- CVE-2020-12149 OS Command Injection - Management File Upload
- CVE-2020-12148 OS Command Injection - nslookup API
- CVE-2020-12147 Unauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database.
- CVE-2020-12146 Silver Peak Unity OrchestratorTM subject to path traversal.
- CVE-2020-12145 Silver Peak Unity OrchestratorTM authentication can be subverted through manipulation of HTTP headers.
- CVE-2020-12144 The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated
- CVE-2020-12143 The certificate used to identify Orchestrator to EdgeConnect devices is not validated
- CVE-2020-12142 IPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentials
- CVE-2020-12141 Memory corruption in contiki-ng:contiki-ng
- CVE-2020-12140 Memory corruption in contiki-ng:contiki-ng
- CVE-2020-1214 Memory corruption in Internet Explorer 11
- CVE-2020-12138 Privilege escalation in amd:atillk64
- CVE-2020-12137 Cross-site scripting in canonical:ubuntu linux
- CVE-2020-12135 Integer overflow in mongodb:c driver
- CVE-2020-12134 Missing authorization in nanometrics:centaur
- CVE-2020-12133 Deserialization in farukawa:electric consciousmap
- CVE-2020-12132 Cross-site scripting in fifthplay:s.a.m.i
- CVE-2020-12131 Cross-site scripting in app2pro:airdisk pro
- CVE-2020-12130 Cross-site scripting in app2pro:airdisk pro
- CVE-2020-1213 Memory corruption in Internet Explorer 11
- CVE-2020-12129 Cross-site scripting in app2pro:airdisk pro
- CVE-2020-12128 Path traversal in file transfer ifamily project:file transfer ifamily
- CVE-2020-12127 Missing authorization in wavlink:wn530h4 firmware
- CVE-2020-12126 Auth bypass in wavlink:wn530h4 firmware
- CVE-2020-12125 Memory corruption in wavlink:wn530h4 firmware
- CVE-2020-12124 Command injection in wavlink:wn530h4 firmware
- CVE-2020-12123 Cross-site request forgery in wavlink:wn530h4 firmware
- CVE-2020-12122 Other in maxpcsecure:max spyware detector
- CVE-2020-12120 Information disclosure in prestashop:correos express
- CVE-2020-1212 Memory corruption in Windows
- CVE-2020-12119 Business logic in ledger:ledger live
- CVE-2020-12118 Incorrect Default Permissions in Binance tss-lib
- CVE-2020-12117 Missing authorization in moxa:nport 5100a firmware
- CVE-2020-12116 Path traversal in zohocorp:manageengine opmanager
- CVE-2020-12114 Race condition in linux:linux kernel
- CVE-2020-12113 Cross-site scripting in bigbluebutton:bigbluebutton
- CVE-2020-12112 Path traversal in bigbluebutton:bigbluebutton
- CVE-2020-12111 Command injection in tp-link:nc260 firmware
- CVE-2020-12110 Hardcoded credentials in tp-link:nc200 firmware
- CVE-2020-1211 Privilege escalation in Windows
- CVE-2020-12109 Command injection in tp-link:nc200 firmware
- CVE-2020-12108 Other in canonical:ubuntu linux
- CVE-2020-12107 Command injection in stengg:vpncrypt m10 firmware
- CVE-2020-12106 Missing authorization in stengg:vpncrypt m10 firmware
- CVE-2020-12105 Security feature bypass in infradead:openconnect
- CVE-2020-12104 SQL injection in internet-formation:wp-advanced-search
- CVE-2020-12103 Path traversal in prasathmani:tiny file manager
- CVE-2020-12102 Path traversal in prasathmani:tiny file manager
- CVE-2020-12101 Missing authorization in xt-commerce:xt-commerce
- CVE-2020-12100 Denial of service in canonical:ubuntu linux
- CVE-2020-1210 Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2020-1209 Privilege escalation in Windows 10 Version 1903 for 32-bit Systems
- CVE-2020-12083 Privilege escalation in flexera:flexnet code insight
- CVE-2020-12082 Cross-site scripting in flexera:flexnet code insight
- CVE-2020-12081 Information disclosure in flexera:flexnet publisher
- CVE-2020-12080 Denial of service in flexera:flexnet publisher
- CVE-2020-1208 Memory corruption in Windows
- CVE-2020-12079 Security feature bypass in beakerbrowser:beaker
- CVE-2020-12078 Command injection in opmantek:open-audit
- CVE-2020-12077 File upload in mappresspro:mappress
- CVE-2020-12076 Cross-site request forgery in supsystic:data tables generator
- CVE-2020-12075 Missing authorization in supsystic:data tables generator
- CVE-2020-12074 Privilege escalation in webtoffee:import export wordpress users
- CVE-2020-12073 Missing authorization in cyberchimps:gutenberg \& elementor templates importer for responsive
- CVE-2020-12071 Cross-site scripting in anchorcms:anchor
- CVE-2020-12070 Information disclosure in advanced-woo-search:advanced woo search