Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 33 of 215.
- CVE-2020-8272 Auth bypass in Citrix SD-WAN Center
- CVE-2020-8271 Path traversal in Citrix SD-WAN Center
- CVE-2020-8270 Command injection in Citrix Virtual Apps and Desktops
- CVE-2020-8269 Privilege escalation in Citrix Virtual Apps and Desktops
- CVE-2020-8268 Prototype pollution in json8-merge-patch
- CVE-2020-8267 Auth bypass in UniFi Protect
- CVE-2020-8265 Use after free in Node
- CVE-2020-8264 Cross-site scripting in actionpack
- CVE-2020-8263 Cross-site scripting in Pulse Connect Secure / Pulse Policy Secure
- CVE-2020-8262 Cross-site scripting in Pulse Connect Secure / Pulse Policy Secure
- CVE-2020-8261 Other in Pulse Connect Secure / Pulse Policy Secure
- CVE-2020-8260 Ivanti Pulse Connect Secure Code Execution
- CVE-2020-8259 Weak cryptography in Nextcloud Server
- CVE-2020-8258 Privilege escalation in Citrix Gateway Plug-in for Windows
- CVE-2020-8257 Privilege escalation in Citrix Gateway Plug-in for Windows
- CVE-2020-8256 XML external entity in Pulse Connect Secure
- CVE-2020-8255 Path traversal in Pulse Connect Secure / Pulse Policy Secure
- CVE-2020-8254 Path traversal in Pulse Secure Desktop Client
- CVE-2020-8253 Auth bypass in Citrix XenMobile Server
- CVE-2020-8252 Memory corruption in Node
- CVE-2020-8251 Denial of service in Node
- CVE-2020-8250 Privilege escalation in Pulse Secure Desktop Client
- CVE-2020-8249 Memory corruption in Pulse Secure Desktop Client
- CVE-2020-8248 Privilege escalation in Pulse Secure Desktop Client
- CVE-2020-8247 Privilege escalation in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- CVE-2020-8246 Denial of service in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- CVE-2020-8245 Cross-site scripting in Citrix ADC, Citrix Gateway
- CVE-2020-8244 Remote Memory Exposure in bl
- CVE-2020-8243 Ivanti Pulse Connect Secure Code Execution
- CVE-2020-8242 SQL injection in ExpressionEngine
- CVE-2020-8241 Other in Pulse Secure Dektop Client
- CVE-2020-8240 Privilege escalation in Pulse Secure Desktop Client
- CVE-2020-8239 Privilege escalation in Pulse Secure Desktop Cient
- CVE-2020-8238 Cross-site scripting in Pulse Connect Secure/ Pulse Policy Secure
- CVE-2020-8237 Uncontrolled Resource Consumption in json-bigint
- CVE-2020-8236 Security feature bypass in Nextcloud Server
- CVE-2020-8235 Missing authorization in Nextcloud Deck app
- CVE-2020-8234 Command injection in EdgeSwitch firmware v1.9.0 and prior
- CVE-2020-8233 Command injection in EdgeSwitch firmware v1.9.0 and prior
- CVE-2020-8232 Information disclosure in EdgeSwitch firmware v1.9.0 and prior
- CVE-2020-8231 Use after free in https://github.com/curl/curl
- CVE-2020-8230 Memory corruption in Desktop Client
- CVE-2020-8229 Denial of service in Desktop Client
- CVE-2020-8228 Business logic in Nextcloud Preferred Provider
- CVE-2020-8227 Path traversal in Desktop Client
- CVE-2020-8226 phpBB Server-Side Request Forgery Vulnerability
- CVE-2020-8225 Information disclosure in Desktop Client
- CVE-2020-8224 Code injection in Desktop Client
- CVE-2020-8223 Privilege escalation in Nextcloud Server
- CVE-2020-8222 Path traversal in Pulse Connect Secure
- CVE-2020-8221 Path traversal in Pulse Connect Secure
- CVE-2020-8220 Command injection in Pulse Connect Secure
- CVE-2020-8219 Missing authorization in Pulse Connect Secure
- CVE-2020-8218 Pulse Connect Secure Code Injection
- CVE-2020-8217 Cross-site scripting in Pulse Connect Secure
- CVE-2020-8216 Information disclosure in Pulse Connect Secure
- CVE-2020-8215 Buffer overflow in canvas
- CVE-2020-8214 Path traversal in servey
- CVE-2020-8213 Information disclosure in Protect for UniFi Cloud Key Gen2 Plus
- CVE-2020-8212 Missing authorization in Citrix XenMobile Server
- CVE-2020-8211 SQL injection in Citrix XenMobile Server
- CVE-2020-8210 Information disclosure in Citrix XenMobile Server
- CVE-2020-8209 Path traversal in Citrix XenMobile Server
- CVE-2020-8208 Cross-site scripting in Citrix XenMobile Server
- CVE-2020-8207 Privilege escalation in Citrix Workspace App for Windows
- CVE-2020-8206 Auth bypass in Pulse Connect Secure
- CVE-2020-8205 Server-Side Request Forgery in @uppy/companion
- CVE-2020-8204 Cross-site scripting in Pulse Connect Secure
- CVE-2020-8203 Prototype Pollution in lodash
- CVE-2020-8202 Denial of service in Nextcloud Preferred Providers
- CVE-2020-8201 Other in Node
- CVE-2020-8200 Information disclosure in Citrix StoreFront
- CVE-2020-8199 Privilege escalation in Citrix Gateway Plug-in for Linux
- CVE-2020-8198 Cross-site scripting in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- CVE-2020-8197 Privilege escalation in Citrix ADC, Citrix Gateway
- CVE-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure
- CVE-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure
- CVE-2020-8194 Code injection in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- CVE-2020-8193 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass
- CVE-2020-8192 Denial of service in fastify
- CVE-2020-8191 Cross-site scripting in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- CVE-2020-8190 Privilege escalation in Citrix ADC, Citrix Gateway
- CVE-2020-8189 Cross-site scripting in Desktop Client
- CVE-2020-8188 Command injection in Protect for UniFi Cloud Key Gen2 Plus, UniFi Dream Machine Pro, UNVR
- CVE-2020-8187 Denial of service in Citrix ADC, Citrix Gateway
- CVE-2020-8186 Injection and Command Injection in devcert
- CVE-2020-8185 Untrusted users can run pending migrations in production in Rails
- CVE-2020-8184 Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names
- CVE-2020-8183 Information disclosure in Nextcloud Server
- CVE-2020-8182 Missing authorization in Nextcloud Deck
- CVE-2020-8181 File upload in Nextcloud Contact
- CVE-2020-8180 Code injection in Nextcloud Talk
- CVE-2020-8179 Missing authorization in Nextcloud Deck
- CVE-2020-8178 Command injection in jison
- CVE-2020-8177 Path traversal in https://github.com/curl/curl
- CVE-2020-8176 Cross-site scripting in @shopify/koa-shopify-auth
- CVE-2020-8175 Uncontrolled resource consumption in jpeg-js
- CVE-2020-8174 Memory corruption in https://github.com/nodejs/node
- CVE-2020-8173 Weak cryptography in Nextcloud Server
- CVE-2020-8172 Security feature bypass in https://github.com/nodejs/node