Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 202 of 215.
- CVE-2020-10181 Sumavision EMR Cross-Site Request Forgery (CSRF)
- CVE-2020-10180 Security feature bypass in eset:cyber security
- CVE-2020-1018 Information disclosure in Dynamics 365 Business Central 2019 Spring Update
- CVE-2020-10177 Out-of-bounds reads in Pillow
- CVE-2020-10176 Code injection in assaabloy:yale wipc-301w firmware
- CVE-2020-10174 Race condition in canonical:ubuntu linux
- CVE-2020-10173 Command injection in comtrend:vr-3033 firmware
- CVE-2020-1017 Privilege escalation in Windows
- CVE-2020-1016 Information disclosure in Windows
- CVE-2020-1015 Privilege escalation in Windows
- CVE-2020-10148 SolarWinds Orion Authentication Bypass
- CVE-2020-10146 Microsoft Teams displayName stored cross-site scripting vulnerability
- CVE-2020-10145 Misconfiguration in ColdFusion
- CVE-2020-10143 Privilege escalation in Reflect
- CVE-2020-10140 Privilege escalation in True Image
- CVE-2020-1014 Privilege escalation in Windows
- CVE-2020-10139 Privilege escalation in True Image 2021
- CVE-2020-10138 Privilege escalation in Cyber Backup
- CVE-2020-10137 Security feature bypass in UZB-7
- CVE-2020-10136 IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic
- CVE-2020-10135 Bluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacks
- CVE-2020-10134 Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacks
- CVE-2020-10132 CVE-2020-10132
- CVE-2020-10131 CVE-2020-10131
- CVE-2020-10130 CVE-2020-10130
- CVE-2020-1013 Group Policy Elevation of Privilege Vulnerability
- CVE-2020-10129 CVE-2020-10129
- CVE-2020-10128 SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting
- CVE-2020-10126 Security feature bypass in SelfServ ATM
- CVE-2020-10125 Weak cryptography in SelfServ ATM
- CVE-2020-10124 Weak cryptography in SelfServ ATM
- CVE-2020-10123 Auth bypass in SelfServ ATM
- CVE-2020-10122 Missing authorization in cpanel:cpanel
- CVE-2020-10121 Code injection in cpanel:cpanel
- CVE-2020-10120 Command injection in cpanel:cpanel
- CVE-2020-1012 WinINet API Elevation of Privilege Vulnerability
- CVE-2020-10119 Command injection in cpanel:cpanel
- CVE-2020-10118 Missing authorization in cpanel:cpanel
- CVE-2020-10117 Security feature bypass in cpanel:cpanel
- CVE-2020-10116 Missing authorization in cpanel:cpanel
- CVE-2020-10115 Code injection in cpanel:cpanel
- CVE-2020-10114 Cross-site scripting in cpanel:cpanel
- CVE-2020-10113 Cross-site scripting in cpanel:cpanel
- CVE-2020-10112 Other in citrix:gateway firmware
- CVE-2020-10111 Other in citrix:gateway firmware
- CVE-2020-10110 Information disclosure in citrix:gateway firmware
- CVE-2020-1011 Privilege escalation in Windows
- CVE-2020-10109 HTTP Request Smuggling in Twisted
- CVE-2020-10108 Improper Input Validation in Twisted
- CVE-2020-10107 Cross-site scripting in phpgurukul:daily expense tracker system
- CVE-2020-10106 SQL injection in phpgurukul:daily expense tracker system
- CVE-2020-10105 Information disclosure in zammad:zammad
- CVE-2020-10104 Information disclosure in zammad:zammad
- CVE-2020-10103 Cross-site scripting in zammad:zammad
- CVE-2020-10102 Information disclosure in zammad:zammad
- CVE-2020-10101 Denial of service in zammad:zammad
- CVE-2020-10100 Missing authorization in zammad:zammad
- CVE-2020-1010 Microsoft Windows Elevation of Privilege Vulnerability
- CVE-2020-10099 Cross-site scripting in zammad:zammad
- CVE-2020-10098 Cross-site scripting in zammad:zammad
- CVE-2020-10097 Information disclosure in zammad:zammad
- CVE-2020-10096 Information disclosure in zammad:zammad
- CVE-2020-10095 Various Lexmark devices have CSRF that allows an attacker to modify the configuration of the device.
- CVE-2020-10094 Cross-site scripting in lexmark:6500e firmware
- CVE-2020-10093 Cross-site scripting in lexmark:6500e firmware
- CVE-2020-10092 Cross-site scripting in gitlab:gitlab
- CVE-2020-10091 Cross-site scripting in gitlab:gitlab
- CVE-2020-10090 Information disclosure in gitlab:gitlab
- CVE-2020-1009 Privilege escalation in Windows
- CVE-2020-10089 Denial of service in gitlab:gitlab
- CVE-2020-10088 Privilege escalation in gitlab:gitlab
- CVE-2020-10087 Information disclosure in gitlab:gitlab
- CVE-2020-10086 Path traversal in gitlab:gitlab
- CVE-2020-10085 Information disclosure in gitlab:gitlab
- CVE-2020-10084 Information disclosure in gitlab:gitlab
- CVE-2020-10083 Missing authorization in gitlab:gitlab
- CVE-2020-10082 Denial of service in gitlab:gitlab
- CVE-2020-10081 Missing authorization in gitlab:gitlab
- CVE-2020-10080 Missing authorization in gitlab:gitlab
- CVE-2020-1008 Memory corruption in Windows
- CVE-2020-10079 Auth bypass in gitlab:gitlab
- CVE-2020-10078 Cross-site scripting in gitlab:gitlab
- CVE-2020-10077 Server-side request forgery in gitlab:gitlab
- CVE-2020-10076 Cross-site scripting in gitlab:gitlab
- CVE-2020-10075 Cross-site scripting in gitlab:gitlab
- CVE-2020-10074 Auth bypass in gitlab:gitlab
- CVE-2020-10073 Denial of service in gitlab:gitlab
- CVE-2020-10072 Improper Handling of Insufficient Permissions or Privileges in zephyr
- CVE-2020-10071 Insufficient publish message length validation in MQTT
- CVE-2020-10070 MQTT buffer overflow on receive buffer
- CVE-2020-1007 Information disclosure in Windows
- CVE-2020-10069 Zephyr Bluetooth unchecked packet data results in denial of service
- CVE-2020-10068 Zephyr Bluetooth DLE duplicate requests vulnerability
- CVE-2020-10067 Integer Overflow In is_in_region Allows User Thread To Access Kernel Memory
- CVE-2020-10066 Incorrect Error Handling in Bluetooth HCI core
- CVE-2020-10065 Missing Size Checks in Bluetooth HCI over SPI
- CVE-2020-10064 Improper Input Frame Validation in ieee802154 Processing
- CVE-2020-10063 Remote Denial of Service in CoAP Option Parsing Due To Integer Overflow
- CVE-2020-10062 Packet length decoding error in MQTT
- CVE-2020-10061 Error handling invalid packet sequence