Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 197 of 215.
- CVE-2020-10751 Security feature bypass in kernel
- CVE-2020-10750 Information Exposure in jaeger
- CVE-2020-1075 Windows Subsystem for Linux Information Disclosure Vulnerability
- CVE-2020-10749 containernetworking/plugins vulnerable to MitM attacks
- CVE-2020-10748 Cross-site Scripting in Keycloak
- CVE-2020-10746 Missing authorization in Infinispan
- CVE-2020-10745 Denial of service in Samba
- CVE-2020-10744 Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
- CVE-2020-10743 Other in Kibana
- CVE-2020-10742 Memory corruption in Kernel
- CVE-2020-10740 Wildfly Unsafe Deserialization Vulnerability
- CVE-2020-1074 Jet Database Engine Remote Code Execution Vulnerability
- CVE-2020-10739 Null dereference in istio/envoy
- CVE-2020-10738 Moodle vulnerable to RCE
- CVE-2020-10737 Race condition in oddjob
- CVE-2020-10736 Missing authorization in ceph
- CVE-2020-10735 Denial of service in python
- CVE-2020-10734 OIDC Logout redirect in keycloak
- CVE-2020-10733 Privilege escalation in PostgreSQL
- CVE-2020-10732 Information disclosure in kernel
- CVE-2020-10731 Misconfiguration in nova libvirt container provided by the Red Hat OpenStack Platform
- CVE-2020-10730 Null dereference in Samba
- CVE-2020-1073 ChakraCore RCE Vulnerability
- CVE-2020-10729 Insufficiently random values in Ansible
- CVE-2020-10728 Privilege escalation in automationbroker/apb
- CVE-2020-10727 ActiveMQ Artemis has Insufficiently Protected Credentials
- CVE-2020-10726 Denial of service in dpdk
- CVE-2020-10725 Null dereference in dpdk
- CVE-2020-10724 Memory corruption in dpdk
- CVE-2020-10723 Integer overflow in dpdk
- CVE-2020-10722 Integer overflow in dpdk
- CVE-2020-10721 fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution
- CVE-2020-10720 Use after free in Kernel
- CVE-2020-1072 Windows Kernel Information Disclosure Vulnerability
- CVE-2020-10719 HTTP Request Smuggling in Undertow
- CVE-2020-10718 Security feature bypass in Wildfly
- CVE-2020-10717 Denial of service in QEMU
- CVE-2020-10716 Missing authorization in rubygem-foreman ansible
- CVE-2020-10715 Other in openshift/console
- CVE-2020-10714 Session Fixation in WildFly Elytron
- CVE-2020-10713 Memory corruption in Grub
- CVE-2020-10712 Information Disclosure in OpenShift Container Platform
- CVE-2020-10711 Null dereference in Kernel
- CVE-2020-10710 Information disclosure in foreman-installer
- CVE-2020-1071 Windows Remote Access Common Dialog Elevation of Privilege Vulnerability
- CVE-2020-10709 Auth bypass in Tower
- CVE-2020-10706 Information disclosure in openshift/openshift-apiserver
- CVE-2020-10705 Allocation of Resources Without Limits or Throttling in Undertow
- CVE-2020-10704 Denial of service in samba
- CVE-2020-10703 Null dereference in libvirt
- CVE-2020-10702 Weak cryptography in qemu
- CVE-2020-10701 Missing authorization in libvirt
- CVE-2020-10700 Use after free in samba
- CVE-2020-1070 Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2020-10699 Misconfiguration in targetcli
- CVE-2020-10698 Information disclosure in Tower
- CVE-2020-10697 Missing authorization in Tower
- CVE-2020-10696 Path Traversal in Buildah
- CVE-2020-10695 Privilege escalation in containers/redhat-sso-7
- CVE-2020-10693 Improper Input Validation in Hibernate Validator
- CVE-2020-10691 Path Traversal in Ansible
- CVE-2020-10690 Use after free in kernel
- CVE-2020-1069 Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2020-10689 Missing Authorization in Eclipse Che
- CVE-2020-10688 Cross-site scripting in RESTEasy
- CVE-2020-10687 HTTP Request Smuggling in Undertow
- CVE-2020-10686 Keycloak users may be able to remove MFA from other users' devices
- CVE-2020-10685 Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
- CVE-2020-10684 Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible
- CVE-2020-10683 dom4j allows External Entities by default which might enable XXE attacks
- CVE-2020-10682 File upload in cmsmadesimple:cms made simple
- CVE-2020-10681 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2020-1068 Microsoft Windows Elevation of Privilege Vulnerability
- CVE-2020-10678 Privilege escalation in octopus:octopus deploy
- CVE-2020-10676 Rancher users retain access after moving namespaces into projects they don't have access to
- CVE-2020-10675 Infinite Loop in jsonparser
- CVE-2020-10674 Command injection in perlspeak project:perlspeak
- CVE-2020-10673 jackson-databind mishandles the interaction between serialization gadgets and typing
- CVE-2020-10672 jackson-databind mishandles the interaction between serialization gadgets and typing
- CVE-2020-10671 Cross-site request forgery in canon:oce colorwave 500 firmware
- CVE-2020-10670 Cross-site scripting in canon:oce colorwave 500 firmware
- CVE-2020-1067 Windows Remote Code Execution Vulnerability
- CVE-2020-10669 Auth bypass in canon:oce colorwave 500 firmware
- CVE-2020-10668 Cross-site scripting in canon:oce colorwave 500 firmware
- CVE-2020-10667 Cross-site scripting in canon:oce colorwave 500 firmware
- CVE-2020-10666 Command injection in sangoma:restapps
- CVE-2020-10665 Privilege escalation in docker:desktop
- CVE-2020-10664 Null dereference in windriver:vxworks
- CVE-2020-10663 Unsafe object creation in json RubyGem
- CVE-2020-10661 HashiCorp Vault Improper Privilege Management
- CVE-2020-10660 HashiCorp Vault Improper Privilege Management
- CVE-2020-1066 .NET Framework Elevation of Privilege Vulnerability
- CVE-2020-10659 Security feature bypass in entrustdatacard:entelligence security provider
- CVE-2020-10658 Deserialization in proofpoint:insider threat management server
- CVE-2020-10657 Deserialization in proofpoint:insider threat management server
- CVE-2020-10656 Deserialization in proofpoint:insider threat management server
- CVE-2020-10655 Deserialization in proofpoint:insider threat management server
- CVE-2020-10654 Memory corruption in pingidentity:pingid ssh integration
- CVE-2020-10650 jackson-databind vulnerable to unsafe deserialization
- CVE-2020-1065 Scripting Engine Memory Corruption Vulnerability