Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 201 of 215.
- CVE-2020-10288 RVD#3327: No authentication required for accesing ABB IRC5 FTP server
- CVE-2020-10287 RVD#3326: Hardcoded default credentials on IRC 5 OPC Server
- CVE-2020-10286 Privilege escalation in xArm 5 Lite, xArm 6 and xArm 7
- CVE-2020-10285 RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks
- CVE-2020-10284 RVD#3321: No Authentication required to exert manual control of the robot
- CVE-2020-10283 RVD#3317: MAVLink version handshaking allows for an attacker to bypass authentication
- CVE-2020-10282 RVD#3316: No authentication in MAVLink protocol
- CVE-2020-10281 RVD#3315: Cleartext transmission of sensitive information in MAVLink protocol version 1.0 and 2.0
- CVE-2020-10280 RVD#2568: Apache server is vulnerable to a DoS
- CVE-2020-1028 Media Foundation Memory Corruption Vulnerability
- CVE-2020-10279 RVD#2569: Insecure operating system defaults in MiR robots
- CVE-2020-10278 RVD#2561: Unprotected BIOS allows user to boot from live OS image.
- CVE-2020-10277 RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation
- CVE-2020-10276 RVD#2558: Default credentials on SICK PLC allows disabling safety features
- CVE-2020-10275 RVD#2565: Weak token generation for the REST API.
- CVE-2020-10274 RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps)
- CVE-2020-10273 RVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllers
- CVE-2020-10272 RVD#2554: MiR ROS computational graph presents no authentication mechanisms
- CVE-2020-10271 Misconfiguration in MiR100
- CVE-2020-10270 RVD#2557: Hardcoded Credentials on MiRX00 Control Dashboard
- CVE-2020-1027 Microsoft Windows Kernel Privilege Escalation
- CVE-2020-10269 RVD#2566: Hardcoded Credentials on MiRX00 wireless Access Point
- CVE-2020-10268 RVD#2550: Terminate Critical Services in KUKA controller KR C4
- CVE-2020-10267 RVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versions
- CVE-2020-10266 RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robot
- CVE-2020-10265 RVD#1443: UR dashboard server enables unauthenticated remote control of core robot functions
- CVE-2020-10264 RTDE Interface allows unauthenticated reading of robot data and unauthenticated writing of registers and outputs
- CVE-2020-10263 Auth bypass in mi:xiaomi xiaoai speaker pro lx06 firmware
- CVE-2020-10262 Auth bypass in mi:xiaomi xiaoai speaker pro lx06 firmware
- CVE-2020-1026 Incorrect Calculation in the MSR JavaScript Cryptography Library
- CVE-2020-10257 Missing authorization in themerex:addons
- CVE-2020-10256 Weak cryptography in 1password:command line interface
- CVE-2020-10255 Security feature bypass in micron:ddr4 sdram
- CVE-2020-10254 Auth bypass in owncloud:owncloud
- CVE-2020-10252 Server-side request forgery in owncloud:owncloud
- CVE-2020-10251 Memory corruption in imagemagick:imagemagick
- CVE-2020-10250 Command injection in meinbwa:direx-pro firmware
- CVE-2020-1025 Microsoft Office Elevation of Privilege Vulnerability
- CVE-2020-10249 Information disclosure in meinbwa:direx-pro firmware
- CVE-2020-10248 Information disclosure in meinbwa:direx-pro firmware
- CVE-2020-10247 Cross-site scripting in misp-project:misp
- CVE-2020-10246 Cross-site scripting in misp-project:misp
- CVE-2020-10245 Memory corruption in codesys:control for beaglebone
- CVE-2020-10244 Weak cryptography in jpaseto project:jpaseto
- CVE-2020-10243 SQL injection in joomla:joomla\!
- CVE-2020-10242 Cross-site scripting in joomla:joomla\!
- CVE-2020-10241 Cross-site request forgery in joomla:joomla\!
- CVE-2020-10240 Business logic in joomla:joomla\!
- CVE-2020-1024 Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2020-10239 Missing authorization in joomla:joomla\!
- CVE-2020-10238 Missing authorization in joomla:joomla\!
- CVE-2020-10237 Froxlor Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2020-10236 Froxlor Information Disclosure
- CVE-2020-10235 Froxlor arbitrary code execution via the database configuration options
- CVE-2020-10234 Null dereference in iobit:advanced systemcare
- CVE-2020-10233 Memory corruption in sleuthkit:the sleuth kit
- CVE-2020-10232 Memory corruption in debian:debian linux
- CVE-2020-10231 Null dereference in tp-link:nc200 firmware
- CVE-2020-10230 SQL injection in control-webpanel:webpanel
- CVE-2020-1023 Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2020-10229 Cross-site request forgery in vtenext:vtenext
- CVE-2020-10228 File upload in vtenext:vtenext
- CVE-2020-10227 Cross-site scripting in vtenext:vtenext
- CVE-2020-10225 File upload in phpgurukul:job portal
- CVE-2020-10224 File upload in phpgurukul:online book store
- CVE-2020-10223 Memory corruption in gonitro:nitro pro
- CVE-2020-10222 Memory corruption in gonitro:nitro pro
- CVE-2020-10221 rConfig OS Command Injection
- CVE-2020-10220 SQL injection in rconfig:rconfig
- CVE-2020-1022 Other in Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise)
- CVE-2020-10218 SQL injection in sapplica:sentrifugo
- CVE-2020-10216 Command injection in dlink:dir-825 firmware
- CVE-2020-10215 Command injection in dlink:dir-825 firmware
- CVE-2020-10214 Memory corruption in dlink:dir-825 firmware
- CVE-2020-10213 Command injection in dlink:dir-825 firmware
- CVE-2020-10212 Server-side request forgery in tecrail:responsive filemanager
- CVE-2020-10211 Code injection in mitel:mivoice connect
- CVE-2020-10210 Hardcoded credentials in amino:ak45x firmware
- CVE-2020-1021 Windows Error Reporting Elevation of Privilege Vulnerability
- CVE-2020-10209 Command injection in amino:ak45x firmware
- CVE-2020-10208 Command injection in amino:ak45x firmware
- CVE-2020-10207 Hardcoded credentials in amino:ak45x firmware
- CVE-2020-10206 Hardcoded credentials in amino:ak45x firmware
- CVE-2020-10204 Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager
- CVE-2020-10203 Persistent Cross-Site scripting in Nexus Repository Manager
- CVE-2020-1020 Microsoft Windows Adobe Font Manager Library Remote Code Execution
- CVE-2020-10199 Sonatype Nexus Repository Remote Code Execution
- CVE-2020-10196 Cross-site scripting in sygnoos:popup builder
- CVE-2020-10195 Missing authorization in sygnoos:popup builder
- CVE-2020-10194 Missing authorization in zimbra:zm-mailbox
- CVE-2020-10193 Security feature bypass in eset:cyber security
- CVE-2020-10192 Cross-site scripting in munkireport project:munkireport
- CVE-2020-10191 Cross-site scripting in munkireport project:munkireport
- CVE-2020-10190 SQL injection in munkireport project:munkireport
- CVE-2020-1019 Privilege escalation in Microsoft RMS Sharing for Mac
- CVE-2020-10189 Zoho ManageEngine Desktop Central File Upload
- CVE-2020-10188 Memory corruption in arista:eos
- CVE-2020-10187 Exposure of Sensitive Information to an Unauthorized Actor in Doorkeeper
- CVE-2020-10185 Auth bypass in yubico:yubikey one time password validation server
- CVE-2020-10184 SQL injection in yubico:yubikey one time password validation server