Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 194 of 215.
- CVE-2020-11047 Out-of-bounds Read in FreeRDP
- CVE-2020-11046 Improper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP
- CVE-2020-11045 Out-of-bounds Read in FreeRDP
- CVE-2020-11044 Double Free in FreeRDP
- CVE-2020-11043 Out-of-bounds Read in FreeRDP
- CVE-2020-11042 Out-of-bounds Read in FreeRDP
- CVE-2020-11041 Improper Validation of Array Index in FreeRDP
- CVE-2020-11040 Out-of-bounds Read in FreeRDP
- CVE-2020-1104 Microsoft SharePoint Spoofing Vulnerability
- CVE-2020-11039 Integer Overflow in FreeRDP
- CVE-2020-11038 Integer Overflow to Buffer Overflow in FreeRDP
- CVE-2020-11037 Potential Observable Timing Discrepancy in Wagtail
- CVE-2020-11036 XSS in GLPI
- CVE-2020-11035 weak CSRF tokens in GLPI
- CVE-2020-11034 bypass of manageRedirect in GLPI
- CVE-2020-11033 Able to read any token through API user endpoint in GLPI
- CVE-2020-11032 SQL injection on addme_observer and addme_assign in GLPI
- CVE-2020-11031 Insecure encryption algorithm in GLPI
- CVE-2020-11030 Cross-site scripting (XSS) in Search block in WordPress
- CVE-2020-1103 Microsoft SharePoint Information Disclosure Vulnerability
- CVE-2020-11029 Cross-site scripting in stats method (object cache) in WordPress
- CVE-2020-11028 Unauthenticated disclosure of certain private posts in WordPress
- CVE-2020-11027 Password reset links invalidation issue in WordPress
- CVE-2020-11026 Specially crafted filenames in WordPress leading to XSS
- CVE-2020-11025 Authenticated cross-site scripting (XSS) in WordPress Customizer
- CVE-2020-11024 Man-in-the-middle attack in Moonlight iOS/tvOS
- CVE-2020-11023 JQuery Cross-Site Scripting (XSS)
- CVE-2020-11022 jQuery has a potential XSS vulnerability
- CVE-2020-11021 HTTP request which redirect to another hostname do not strip authorization header in Actions Http-Client
- CVE-2020-11020 Authentication and extension bypass in Faye
- CVE-2020-1102 Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2020-11019 Out of bound read in update_recv in FreeRDP
- CVE-2020-11018 Out of bound read in cliprdr_server_receive_capabilities in FreeRDP
- CVE-2020-11017 Double free in cliprdr_server_receive_capabilities in FreeRDP
- CVE-2020-11016 Remote code execution in Message sending functionality in IntelMQ Manager
- CVE-2020-11015 Device Authentication Vulnerability in thinx-device-api IoT Device Management Server
- CVE-2020-11014 BIP LI01 output reordering may cause malformed SLP MINT transactions in Electron-Cash-SLP
- CVE-2020-11013 lookup Function Information Discolosure in Helm
- CVE-2020-11012 Authentication bypass MinIO Admin API
- CVE-2020-11011 RCE via file upload in Phproject
- CVE-2020-11010 SQL injection in Tortoise ORM
- CVE-2020-1101 Microsoft Office SharePoint XSS Vulnerability
- CVE-2020-11009 IDOR can reveal execution data and logs to unauthorized user in Rundeck
- CVE-2020-11008 Malicious URLs can still cause Git to send a stored credential to the wrong server
- CVE-2020-11007 Negative charge in shopping cart possible in Shopizer
- CVE-2020-11006 Potential remote code execution in Shopizer
- CVE-2020-11005 Internal NCryptDecrypt method could be used externally from WindowsHello library.
- CVE-2020-11004 SQL Injection in Admidio
- CVE-2020-11003 CSRF and DNS Rebinding in Oasis
- CVE-2020-11002 Remote Code Execution (RCE) vulnerability in dropwizard-validation
- CVE-2020-11001 Possible XSS attack in Wagtail
- CVE-2020-11000 Improper URL validation in GreenBrowser
- CVE-2020-1100 Microsoft Office SharePoint XSS Vulnerability
- CVE-2020-10997 Information disclosure in percona:xtrabackup
- CVE-2020-10996 Hardcoded credentials in percona:xtradb cluster
- CVE-2020-10995 Denial of service in debian:debian linux
- CVE-2020-10994 Out-of-bounds reads in Pillow
- CVE-2020-10993 XML external entity in osmand:osmand
- CVE-2020-10992 XML external entity in azkaban project:azkaban
- CVE-2020-10991 XML external entity in mulesoft:aplkit
- CVE-2020-10990 XML external entity in accenture:mercury
- CVE-2020-1099 Microsoft Office SharePoint XSS Vulnerability
- CVE-2020-10989 Cross-site scripting in tenda:ac15 firmware
- CVE-2020-10988 Hardcoded credentials in tenda:ac15 firmware
- CVE-2020-10987 Tenda AC1900 Router AC15 Model Remote Code Execution
- CVE-2020-10986 Cross-site request forgery in tenda:ac15 firmware
- CVE-2020-10985 Cross-site scripting in gambio:gambio gx
- CVE-2020-10984 Cross-site request forgery in gambio:gambio gx
- CVE-2020-10983 SQL injection in gambio:gambio gx
- CVE-2020-10982 SQL injection in gambio:gambio gx
- CVE-2020-10981 Missing authorization in gitlab:gitlab
- CVE-2020-10980 Server-side request forgery in gitlab:gitlab
- CVE-2020-1098 Windows Shell Infrastructure Component Elevation of Privilege Vulnerability
- CVE-2020-10979 Information disclosure in gitlab:gitlab
- CVE-2020-10978 Information disclosure in gitlab:gitlab
- CVE-2020-10977 Path traversal in gitlab:gitlab
- CVE-2020-10976 Information disclosure in gitlab:gitlab
- CVE-2020-10975 Information disclosure in gitlab:gitlab
- CVE-2020-10974 Missing authorization in wavlink:jetstream ac3000 firmware
- CVE-2020-10973 Missing authorization in wavlink:wn530hg4 firmware
- CVE-2020-10972 Information disclosure in wavlink:wn530hg4 firmware
- CVE-2020-10971 Cross-site request forgery in wavlink:wl-wn530hg4 firmware
- CVE-2020-1097 Windows Graphics Component Information Disclosure Vulnerability
- CVE-2020-10969 jackson-databind mishandles the interaction between serialization gadgets and typing
- CVE-2020-10968 jackson-databind mishandles the interaction between serialization gadgets and typing
- CVE-2020-10967 Denial of service in dovecot:dovecot
- CVE-2020-10966 Other in hestiacp:control panel
- CVE-2020-10965 Auth bypass in teradici:pcoip management console
- CVE-2020-10964 File upload in s9y:serendipity
- CVE-2020-10963 FrozenNode Laravel-Administrator unrestricted file upload
- CVE-2020-10962 Privilege escalation in psappdeploytoolkit:powershell app deployment toolkit
- CVE-2020-10960 MediaWiki makeCollapsible allows applying event handler to any CSS selector
- CVE-2020-1096 Microsoft Edge PDF Remote Code Execution Vulnerability
- CVE-2020-10959 MediaWiki Open Redirect vulnerability
- CVE-2020-10958 Use after free in dovecot:dovecot
- CVE-2020-10957 Null dereference in dovecot:dovecot
- CVE-2020-10956 Server-side request forgery in gitlab:gitlab
- CVE-2020-10955 Missing authorization in debian:debian linux
- CVE-2020-10954 Denial of service in gitlab:gitlab
- CVE-2020-10953 Path traversal in gitlab:gitlab