Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 31 of 215.
- CVE-2020-8592 SQL injection in n/a
- CVE-2020-8591 Auth bypass in n/a
- CVE-2020-8590 Information disclosure in Clustered Data ONTAP
- CVE-2020-8589 Information disclosure in Clustered Data ONTAP
- CVE-2020-8588 Information disclosure in Clustered Data ONTAP
- CVE-2020-8587 Information disclosure in OnCommand System Manager 9.x
- CVE-2020-8585 Information disclosure in OnCommand Unified Manager for 7-Mode (core package)
- CVE-2020-8584 Code injection in Element OS
- CVE-2020-8583 Information disclosure in NetApp SolidFire & HCI Storage Node (Element Software) )
- CVE-2020-8582 Information disclosure in NetApp SolidFire & HCI Storage Node (Element Software)
- CVE-2020-8581 Missing authorization in Clustered Data ONTAP
- CVE-2020-8580 Denial of service in E-Series SANtricity OS Controller Software
- CVE-2020-8579 Denial of service in clustered Data ONTAP
- CVE-2020-8578 Information disclosure in Clustered Data ONTAP
- CVE-2020-8577 Information disclosure in E-Series SANtricity OS Controller Software
- CVE-2020-8576 Information disclosure in Clustered Data ONTAP
- CVE-2020-8575 Denial of service in Active IQ Unified Manager for VMware vSphere and Windows 7.3 and above
- CVE-2020-8574 Code injection in Active IQ Unified Manager for Linux 7.3 and above
- CVE-2020-8573 Hardcoded credentials in NetApp HCI Baseboard Management Controller (BMC) HCI H610C, NetApp HCI Baseboard Management Controller (BMC) HCI H615C, NetApp HCI Baseboard Management Controller (BMC) HCI H610S
- CVE-2020-8572 Information disclosure in Sensitive Information Disclosure Vulnerability in Element OS and Element HealthTools
- CVE-2020-8571 Denial of service in StorageGRID (formerly StorageGRID Webscale)
- CVE-2020-8570 Kubernetes Java client libraries unvalidated path traversal in Copy implementation
- CVE-2020-8569 Kubernetes CSI snapshot-controller DoS
- CVE-2020-8568 Kubernetes Secrets Store CSI Driver sync/rotate directory traversal
- CVE-2020-8567 Kubernetes Secrets Store CSI Driver plugin directory traversals
- CVE-2020-8566 Ceph RBD adminSecrets exposed in logs when loglevel >= 4
- CVE-2020-8565 Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9
- CVE-2020-8564 Docker config secrets leaked when file is malformed and loglevel >= 4
- CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager
- CVE-2020-8562 Bypass of Kubernetes API Server proxy TOCTOU
- CVE-2020-8561 Webhook redirect in kube-apiserver
- CVE-2020-8559 Privilege escalation from compromised node to cluster
- CVE-2020-8558 Kubernetes node setting allows for neighboring hosts to bypass localhost boundary
- CVE-2020-8557 Kubernetes node disk Denial of Service by writing to container /etc/hosts
- CVE-2020-8555 Kubernetes kube-controller-manager SSRF
- CVE-2020-8554 Kubernetes man in the middle using LoadBalancer or ExternalIPs
- CVE-2020-8553 Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names
- CVE-2020-8552 Kubernetes API server denial of service
- CVE-2020-8551 Kubernetes kubelet denial of service
- CVE-2020-8549 Cross-site scripting in n/a
- CVE-2020-8548 Cross-site scripting in n/a
- CVE-2020-8547 Auth bypass in n/a
- CVE-2020-8545 Path traversal in n/a
- CVE-2020-8544 OX App Suite through 7.10.3 allows SSRF.
- CVE-2020-8543 Other in n/a
- CVE-2020-8542 OX App Suite through 7.10.3 allows XSS.
- CVE-2020-8541 XML external entity in n/a
- CVE-2020-8540 XML external entity in n/a
- CVE-2020-8539 Command injection in n/a
- CVE-2020-8521 SQL injection in phpzag live add edit delete data tables records with ajax php mysql
- CVE-2020-8520 SQL injection in phpzag live add edit delete data tables records with ajax php mysql
- CVE-2020-8519 SQL injection in phpzag live add edit delete data tables records with ajax php mysql
- CVE-2020-8518 Code injection in n/a
- CVE-2020-8517 Memory corruption in n/a
- CVE-2020-8516 Information disclosure in n/a
- CVE-2020-8515 Multiple DrayTek Vigor Routers Web Management Page
- CVE-2020-8514 Cross-site scripting in n/a
- CVE-2020-8512 Cross-site scripting in n/a
- CVE-2020-8511 File upload in n/a
- CVE-2020-8510 Auth bypass in n/a
- CVE-2020-8509 Missing authorization in n/a
- CVE-2020-8508 Privilege escalation in n/a
- CVE-2020-8507 Information disclosure in n/a
- CVE-2020-8506 Information disclosure in n/a
- CVE-2020-8505 Cross-site request forgery in n/a
- CVE-2020-8504 Cross-site request forgery in n/a
- CVE-2020-8503 Missing authorization in n/a
- CVE-2020-8500 File upload in n/a
- CVE-2020-8498 Cross-site scripting in n/a
- CVE-2020-8497 Missing authorization in n/a
- CVE-2020-8496 Cross-site scripting in n/a
- CVE-2020-8495 Privilege escalation in n/a
- CVE-2020-8494 Privilege escalation in n/a
- CVE-2020-8493 Cross-site scripting in n/a
- CVE-2020-8492 Denial of service in n/a
- CVE-2020-8489 ABB System 800xA Inter process communication vulnerability - 800xA Information Management
- CVE-2020-8488 ABB System 800xA Inter process communication vulnerability - 800xA Batch Management
- CVE-2020-8487 ABB System 800xA Inter process communication vulnerability - System 800xA Base
- CVE-2020-8486 ABB System 800xA Inter process communication vulnerability - 800xA RNRP
- CVE-2020-8485 ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300
- CVE-2020-8484 ABB System 800xA Inter process communication vulnerability - 800xA for DCI
- CVE-2020-8482 ABB Device Library Wizard Information Disclosure Vulnerability
- CVE-2020-8481 ABB Central Licensing System - Information disclosure
- CVE-2020-8479 ABB Central Licensing System - XML External Entity Injection
- CVE-2020-8478 ABB System 800xA Inter process communication vulnerability
- CVE-2020-8477 ABB System 800xA Information Manager Remote Code Execution
- CVE-2020-8476 ABB Central Licensing System - Elevation of Privilege Vulnerability
- CVE-2020-8475 ABB Central Licensing System - Denial of Service Vulnerability
- CVE-2020-8474 ABB System 800xA Weak Registry Permissions
- CVE-2020-8473 ABB System 800xA Weak File Permissions - ABB System 800xA Base
- CVE-2020-8472 ABB System 800xA Weak File Permissions - different products
- CVE-2020-8471 ABB Central Licensing System - Weak File Permissions
- CVE-2020-8470 Path traversal in Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS)
- CVE-2020-8469 Privilege escalation in Trend Micro Password Manager for Windows
- CVE-2020-8468 Trend Micro Multiple Products Content Validation Escape
- CVE-2020-8467 Trend Micro Apex One and OfficeScan Remote Code Execution
- CVE-2020-8466 Command injection in Trend Micro InterScan Web Security Virtual Appliance
- CVE-2020-8465 Auth bypass in Trend Micro InterScan Web Security Virtual Appliance
- CVE-2020-8464 Server-side request forgery in Trend Micro InterScan Web Security Virtual Appliance
- CVE-2020-8463 Auth bypass in Trend Micro InterScan Web Security Virtual Appliance