Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 27 of 215.
- CVE-2020-9076 Auth bypass in HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B
- CVE-2020-9075 Path traversal in Secospace USG6300;USG6300E
- CVE-2020-9074 Denial of service in HONOR 20
- CVE-2020-9073 Auth bypass in P20
- CVE-2020-9072 Privilege escalation in OSD
- CVE-2020-9071 Memory corruption in AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;AR510;NetEngine16EX;SRG1300;SRG2300;SRG3300
- CVE-2020-9070 Auth bypass in Taurus-AL00B
- CVE-2020-9069 Information disclosure in Anne-AL00
- CVE-2020-9068 Auth bypass in AR3200
- CVE-2020-9067 Memory corruption in SmartAX EA5800
- CVE-2020-9066 Auth bypass in OxfordP-AN10B
- CVE-2020-9065 Use after free in Taurus-AL00B
- CVE-2020-9064 Auth bypass in Honor V30
- CVE-2020-9063 Memory corruption in SelfServ ATM
- CVE-2020-9062 Missing authorization in ProCash 2100xe USB ATM
- CVE-2020-9061 Denial of service in 500 series
- CVE-2020-9060 Denial of service in 500 series
- CVE-2020-9059 Denial of service in 500 series
- CVE-2020-9058 Weak cryptography in 500 series
- CVE-2020-9057 Weak cryptography in 100 series
- CVE-2020-9056 Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting
- CVE-2020-9055 Cross-site scripting in LYNX Customer Service Portal
- CVE-2020-9054 Zyxel Multiple NAS Devices OS Command Injection
- CVE-2020-9050 Path traversal in Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1
- CVE-2020-9049 victor Web Client and C•CURE Web Client JSON Web Token (JWT) Vulnerability
- CVE-2020-9048 victor Web Client - Arbitrary File Deletion Vulnerability
- CVE-2020-9047 exacqVision Software - Improper Verification of Cryptographic Signature
- CVE-2020-9046 Kantech EntraPass Security Management Software - System Permissions Vulnerability
- CVE-2020-9045 Information disclosure in American Dynamics victor Video Management System v5.2
- CVE-2020-9044 Metasys Improper Restriction of XML External Entity Reference
- CVE-2020-9043 Information disclosure in n/a
- CVE-2020-9042 Cross-site request forgery in n/a
- CVE-2020-9041 Denial of service in n/a
- CVE-2020-9040 Couchbase Server Java SDK before 2.7.1.1 allows a potential attacker to forge an SSL certificate and pose as the intended peer.
- CVE-2020-9039 Missing authorization in n/a
- CVE-2020-9038 Cross-site Scripting in Joplin
- CVE-2020-9036 Jeedom through 4.0.38 allows XSS.
- CVE-2020-9034 Auth bypass in n/a
- CVE-2020-9033 Path traversal in n/a
- CVE-2020-9032 Path traversal in n/a
- CVE-2020-9031 Path traversal in n/a
- CVE-2020-9030 Path traversal in n/a
- CVE-2020-9029 Path traversal in n/a
- CVE-2020-9028 Cross-site scripting in n/a
- CVE-2020-9027 Command injection in n/a
- CVE-2020-9026 Command injection in n/a
- CVE-2020-9025 Cross-site scripting in n/a
- CVE-2020-9024 Misconfiguration in n/a
- CVE-2020-9023 Hardcoded credentials in n/a
- CVE-2020-9022 Cross-site scripting in n/a
- CVE-2020-9021 Command injection in n/a
- CVE-2020-9020 Command injection in n/a
- CVE-2020-9019 Cross-site scripting in n/a
- CVE-2020-9018 Cross-site request forgery in n/a
- CVE-2020-9017 Other in n/a
- CVE-2020-9016 Dolibarr ERP and CRM contain XSS Vulnerability
- CVE-2020-9015 Security feature bypass in n/a
- CVE-2020-9014 Denial of service in n/a
- CVE-2020-9013 Security feature bypass in n/a
- CVE-2020-9012 Cross-site scripting in n/a
- CVE-2020-9009 Missing authorization in n/a
- CVE-2020-9008 Cross-site scripting in n/a
- CVE-2020-9007 Cross-site scripting in n/a
- CVE-2020-9006 SQL injection in n/a
- CVE-2020-9005 Memory corruption in n/a
- CVE-2020-9004 Auth bypass in n/a
- CVE-2020-9003 Cross-site scripting in n/a
- CVE-2020-9002 Privilege escalation in n/a
- CVE-2020-9000 Denial of service in n/a
- CVE-2020-8997 Memory corruption in n/a
- CVE-2020-8996 Path traversal in n/a
- CVE-2020-8995 Hardcoded credentials in n/a
- CVE-2020-8994 Auth bypass in n/a
- CVE-2020-8992 Denial of service in n/a
- CVE-2020-8991 Denial of service in n/a
- CVE-2020-8990 Auth bypass in n/a
- CVE-2020-8989 Information disclosure in n/a
- CVE-2020-8988 Weak cryptography in n/a
- CVE-2020-8987 Security feature bypass in n/a
- CVE-2020-8986 Auth bypass in n/a
- CVE-2020-8985 Cross-site scripting in n/a
- CVE-2020-8984 Security feature bypass in n/a
- CVE-2020-8983 Path traversal in n/a
- CVE-2020-8982 Path traversal in n/a
- CVE-2020-8981 Cross-site scripting in n/a
- CVE-2020-8976 ZGR TPS200 Cross-Site Request Forgery (CSRF)
- CVE-2020-8975 ZGR TPS200 NG Information Exposure
- CVE-2020-8974 ZGR TPS200 NG Missing Reference to Active Allocated Resource
- CVE-2020-8973 ZGR TPS200 NG Improper access control
- CVE-2020-8968 Parallels Remote Application Server credentials management errors
- CVE-2020-8967 GESIO SQL injection vulnerability
- CVE-2020-8966 Cross Site Scripting (XSS) flaws found in Tiki-Wiki CMS software
- CVE-2020-8964 Hardcoded credentials in n/a
- CVE-2020-8963 Command injection in n/a
- CVE-2020-8962 Memory corruption in n/a
- CVE-2020-8961 Security feature bypass in n/a
- CVE-2020-8960 Cross-site scripting in n/a
- CVE-2020-8959 Other in n/a
- CVE-2020-8958 Command injection in n/a
- CVE-2020-8956 Information disclosure in n/a