Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 185 of 215.
- CVE-2020-1207 Use after free in Windows
- CVE-2020-12069 CODESYS V3 prone to Inadequate Password Hashing
- CVE-2020-12068 Privilege escalation in codesys:control for beaglebone
- CVE-2020-12067 Auth bypass in pilz:pmc
- CVE-2020-12066 Denial of service in canonical:ubuntu linux
- CVE-2020-12063 Security feature bypass in postfix:postfix
- CVE-2020-12062 Other in openbsd:openssh
- CVE-2020-12061 Information disclosure in nitrokey:fido u2f firmware
- CVE-2020-1206 Information disclosure in Windows 10 Version 1903 for 32-bit Systems
- CVE-2020-12059 Null dereference in canonical:ubuntu linux
- CVE-2020-12058 Cross-site scripting in oscommerce:ce phoenix
- CVE-2020-12054 Cross-site scripting in catchplugins:catch breadcrumb
- CVE-2020-12053 Auth bypass in unisys:stealth
- CVE-2020-12052 Cross-site scripting in grafana:grafana
- CVE-2020-12051 Information disclosure in mediawiki:mediawiki
- CVE-2020-12050 Race condition in fedoraproject:fedora
- CVE-2020-1205 Microsoft SharePoint Spoofing Vulnerability
- CVE-2020-12049 Denial of service in canonical:ubuntu linux
- CVE-2020-12048 Information disclosure in Baxter Phoenix Hemodialysis Delivery System
- CVE-2020-12047 Hardcoded credentials in Baxter Sigma Spectrum Infusion Pumps
- CVE-2020-12046 Security feature bypass in Opto 22 SoftPAC Project
- CVE-2020-12045 Hardcoded credentials in Baxter Sigma Spectrum Infusion Pumps
- CVE-2020-12043 Misconfiguration in Baxter Sigma Spectrum Infusion Pumps
- CVE-2020-12042 Path traversal in Opto 22 SoftPAC Project
- CVE-2020-12041 Misconfiguration in Baxter Sigma Spectrum Infusion Pumps
- CVE-2020-12040 Information disclosure in Baxter Sigma Spectrum Infusion Pumps
- CVE-2020-1204 Privilege escalation in Windows
- CVE-2020-12039 Hardcoded credentials in Baxter Sigma Spectrum Infusion Pumps
- CVE-2020-12038 Memory corruption in EDS Subsystem, FactoryTalk Linx software (Previously called RSLinx Enterprise), RSLinx Classic, RSNetWorx software, Studio 5000 Logix Designer software
- CVE-2020-12037 Information disclosure in Baxter PrismaFlex and PrisMax
- CVE-2020-12036 Information disclosure in Baxter PrismaFlex and PrisMax
- CVE-2020-12035 Hardcoded credentials in Baxter PrismaFlex and PrisMax
- CVE-2020-12034 SQL injection in EDS Subsystem, FactoryTalk Linx software (Previously called RSLinx Enterprise), RSLinx Classic, RSNetWorx software, Studio 5000 Logix Designer software
- CVE-2020-12033 Other in Rockwell Automation FactoryTalk Services Platform
- CVE-2020-12032 Information disclosure in Baxter ExactaMix EM 2400 & EM 1200
- CVE-2020-12031 Rockwell Automation FactoryTalk View SE
- CVE-2020-12030 Emerson WirelessHART Gateway
- CVE-2020-1203 Memory corruption in Microsoft Visual Studio
- CVE-2020-12029 Rockwell Automation FactoryTalk View SE
- CVE-2020-12028 Rockwell Automation FactoryTalk View SE
- CVE-2020-12027 Rockwell Automation FactoryTalk View SE
- CVE-2020-12026 Path traversal in Advantech WebAccess Node
- CVE-2020-12025 XML external entity in Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02
- CVE-2020-12024 Security feature bypass in Baxter ExactaMix EM 2400 & EM 1200
- CVE-2020-12023 Philips IntelliBridge Enterprise IBE Insertion of Sensitive Information into Log File
- CVE-2020-12022 Memory corruption in Advantech WebAccess Node
- CVE-2020-12021 Cross-site scripting in OSIsoft PI Web API 2019
- CVE-2020-12020 Missing authorization in Baxter ExactaMix EM 2400 & EM 1200
- CVE-2020-1202 Privilege escalation in Microsoft Visual Studio
- CVE-2020-12019 Memory corruption in WebAccess Node
- CVE-2020-12018 Memory corruption in Advantech WebAccess Node
- CVE-2020-12017 Auth bypass in GE Grid Solutions Reason RT Clocks
- CVE-2020-12016 Hardcoded credentials in Baxter ExactaMix EM 2400 & EM 1200
- CVE-2020-12015 Deserialization in GenBroker32
- CVE-2020-12014 SQL injection in Advantech WebAccess Node
- CVE-2020-12013 SQL injection in GenBroker32
- CVE-2020-12012 Hardcoded credentials in Baxter ExactaMix EM 2400 & EM 1200
- CVE-2020-12011 Memory corruption in GenBroker32
- CVE-2020-12010 Path traversal in Advantech WebAccess Node
- CVE-2020-1201 Privilege escalation in Windows
- CVE-2020-12009 Deserialization in GenBroker32
- CVE-2020-12008 Information disclosure in Baxter ExactaMix EM 2400 & EM 1200
- CVE-2020-12007 Deserialization in GenBroker32
- CVE-2020-12006 Path traversal in Advantech WebAccess Node
- CVE-2020-12005 Denial of service in FactoryTalk Linx, RSLinx Classic, Connected Components Workbench, ControlFLASH Plus, FactoryTalk Asset Centre, FactoryTalk Linx CommDTM, Studio 5000 Launcher, Studio 5000 Logix Designer software
- CVE-2020-12004 Missing authorization in Ignition 8 Gateway
- CVE-2020-12003 Path traversal in FactoryTalk Linx, RSLinx Classic, Connected Components Workbench, ControlFLASH Plus, FactoryTalk Asset Centre, FactoryTalk Linx CommDTM, Studio 5000 Launcher, Studio 5000 Logix Designer software
- CVE-2020-12002 Memory corruption in Advantech WebAccess Node
- CVE-2020-12001 Path traversal in FactoryTalk Linx, RSLinx Classic, Connected Components Workbench, ControlFLASH Plus, FactoryTalk Asset Centre, FactoryTalk Linx CommDTM, Studio 5000 Launcher, Studio 5000 Logix Designer software
- CVE-2020-12000 Deserialization in Ignition 8 Gateway
- CVE-2020-1200 Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2020-11999 Code injection in FactoryTalk Linx, RSLinx Classic, Connected Components Workbench, ControlFLASH Plus, FactoryTalk Asset Centre, FactoryTalk Linx CommDTM, Studio 5000 Launcher, Studio 5000 Logix Designer software
- CVE-2020-11998 Remote code execution in Apache ActiveMQ
- CVE-2020-11997 Missing authorization in Apache Guacamole
- CVE-2020-11996 Uncontrolled Resource Consumption in Apache Tomcat
- CVE-2020-11995 Apache Dubbo default deserialization protocol Hessian2 cause CRE
- CVE-2020-11994 Server side template injection in Apache Camel
- CVE-2020-11993 Race condition in Apache HTTP Server
- CVE-2020-11991 XML external entity in Apache Cocoon
- CVE-2020-11990 Information disclosure in Apache Cordova ( cordova-plugin-camera )
- CVE-2020-1199 Privilege escalation in Windows
- CVE-2020-11989 Improper Authentication in Apache Shiro
- CVE-2020-11988 Server-side request forgery (SSRF) in Apache XmlGraphics Commons
- CVE-2020-11987 Server-side request forgery (SSRF) in Apache Batik
- CVE-2020-11986 Code injection in Apache NetBeans
- CVE-2020-11985 Security feature bypass in Apache HTTP Server
- CVE-2020-11984 Memory corruption in Apache HTTP Server
- CVE-2020-11983 Multiple stored XSS in RBAC Admin screens in Apache Airflow
- CVE-2020-11982 Insecure default config of Celery worker in Apache Airflow
- CVE-2020-11981 Command injection via Celery broker in Apache Airflow
- CVE-2020-11980 Server-Side Request Forgery in Karaf
- CVE-2020-1198 Microsoft Office SharePoint XSS Vulnerability
- CVE-2020-11979 Code injection in Apache Ant
- CVE-2020-11978 Apache Airflow Command Injection
- CVE-2020-11977 Shell command injection in Apache Syncope
- CVE-2020-11976 Exposure of Sensitive Information to an Unauthorized Actor in Apache Wicket
- CVE-2020-11975 Improper Input Validation in Apache Unomi
- CVE-2020-11974 Remote code execution in DolphinScheduler
- CVE-2020-11973 Apache Camel Netty enables Java deserialization by default
- CVE-2020-11972 Deserialization of Untrusted Data in Apache Camel RabbitMQ