Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 35 of 215.
- CVE-2020-8019 syslog-ng: Local privilege escalation from new to root in %post
- CVE-2020-8018 User owned /etc in SLES15-SP1-CHOST-BYOS
- CVE-2020-8017 race condition on texlive-filesystem cron job allows for the deletion of unintended files
- CVE-2020-8016 race condition in the packaging of texlive-filesysten
- CVE-2020-8015 Local privilege escalation in exim package from user mail to root
- CVE-2020-8014 kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage
- CVE-2020-8013 permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim
- CVE-2020-8012 Memory corruption in CA Unified Infrastructure Management (Nimsoft/UIM)
- CVE-2020-8011 Null dereference in CA Unified Infrastructure Management (Nimsoft/UIM)
- CVE-2020-8010 Missing authorization in CA Unified Infrastructure Management (Nimsoft/UIM)
- CVE-2020-8009 Path traversal in motu:avb firmware
- CVE-2020-8007 The pwrstudio web application of EV Charger (in the server in Circontrol Raption through 5.6.2) is vulnerable to OS command injection via th
- CVE-2020-8006 Memory corruption in circontrol:raption server
- CVE-2020-8004 Security feature bypass in st:stm32f1 firmware
- CVE-2020-8003 Memory corruption in debian:debian linux
- CVE-2020-8002 Null dereference in debian:debian linux
- CVE-2020-8001 Hardcoded credentials in intelliantech:aptus
- CVE-2020-8000 Hardcoded credentials in intelliantech:aptus web
- CVE-2020-7999 Hardcoded credentials in intelliantech:aptus
- CVE-2020-7998 File upload in super file explorer project:super file explorer
- CVE-2020-7997 Cross-site scripting in asus:rt-ac66u firmware
- CVE-2020-7996 XSS in Dolibarr ERP & CRM
- CVE-2020-7995 Dolibarr Improper Restriction of Excessive Authentication Attempts
- CVE-2020-7994 Dolibarr cross-site scripting (XSS) vulnerability
- CVE-2020-7993 Missing authorization in prototypejs:prototype
- CVE-2020-7991 Cross-site request forgery in adive:framework
- CVE-2020-7990 Cross-site scripting in adive:framework
- CVE-2020-7989 Cross-site scripting in adive:framework
- CVE-2020-7988 Cross-site request forgery in phpipam:phpipam
- CVE-2020-7984 Information disclosure in solarwinds:n-central
- CVE-2020-7983 Cross-site request forgery in commscope:ruckus zoneflex r500 firmware
- CVE-2020-7982 Security feature bypass in openwrt:lede
- CVE-2020-7981 SQL Injection in Geocoder
- CVE-2020-7980 Command injection in intelliantech:aptus web
- CVE-2020-7979 Misconfiguration in gitlab:gitlab
- CVE-2020-7978 Denial of service in gitlab:gitlab
- CVE-2020-7977 Misconfiguration in gitlab:gitlab
- CVE-2020-7976 Missing authorization in gitlab:gitlab
- CVE-2020-7974 Information disclosure in gitlab:gitlab
- CVE-2020-7973 GitLab through 12.7.2 allows XSS.
- CVE-2020-7972 Misconfiguration in gitlab:gitlab
- CVE-2020-7971 Cross-site scripting in gitlab:gitlab
- CVE-2020-7969 Information disclosure in gitlab:gitlab
- CVE-2020-7968 Missing authorization in gitlab:gitlab
- CVE-2020-7967 Misconfiguration in gitlab:gitlab
- CVE-2020-7966 Path traversal in gitlab:gitlab
- CVE-2020-7965 Cross-Site Request Forgery in Webargs
- CVE-2020-7964 Missing Authentication for Critical Function in Saleor
- CVE-2020-7962 Information disclosure in oneidentity:password manager
- CVE-2020-7961 Liferay Portal Deserialization of Untrusted Data
- CVE-2020-7959 Information disclosure in labvantage:labvantage
- CVE-2020-7958 Information disclosure in oneplus:oneplus 7 pro firmware
- CVE-2020-7957 Denial of service in dovecot:dovecot
- CVE-2020-7956 Improper Certificate Validation in HashiCorp Nomad
- CVE-2020-7955 Incorrect Authorization in HashiCorp Consul
- CVE-2020-7954 Misconfiguration in opservices:opmon
- CVE-2020-7953 Missing authorization in opservices:opmon
- CVE-2020-7952 Memory corruption in valvesoftware:dota 2
- CVE-2020-7951 Memory corruption in valvesoftware:dota 2
- CVE-2020-7950 Memory corruption in valvesoftware:dota 2
- CVE-2020-7949 Memory corruption in valvesoftware:dota 2
- CVE-2020-7948 Missing authorization in auth0:login by auth0
- CVE-2020-7947 Code injection in auth0:login by auth0
- CVE-2020-7945 Information disclosure in Continuous Delivery for Puppet Enterprise (CD4PE)
- CVE-2020-7944 Information disclosure in Continuous Delivery for Puppet Enterprise (CD4PE)
- CVE-2020-7943 Information disclosure in Puppet Enterprise
- CVE-2020-7942 Improper Certificate Validation in Puppet
- CVE-2020-7941 Plone Unauthenticated Write Vulnerability
- CVE-2020-7940 Plone allows weak passwords
- CVE-2020-7939 Plone SQL Injection Vulnerability
- CVE-2020-7938 Plone Privilege Escallation
- CVE-2020-7937 Plone cross site scripting (XSS)
- CVE-2020-7936 Plone Open Redirect Vulnerability
- CVE-2020-7935 File upload in artica:pandora fms
- CVE-2020-7934 Liferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortlet
- CVE-2020-7932 OMERO-web Sensitive Data Exposure
- CVE-2020-7931 Code injection in jfrog:artifactory
- CVE-2020-7929 Specially crafted regex query can cause DoS
- CVE-2020-7928 Improper neutralization of null byte leads to read overrun
- CVE-2020-7927 Potential privilege escalation in Ops Manager API
- CVE-2020-7926 Specific query can cause a DoS against MongoDB Server
- CVE-2020-7925 Denial of Service when processing malformed Role names
- CVE-2020-7924 Specific command line parameter might result in accepting invalid certificate
- CVE-2020-7923 Specific GeoQuery can cause DoS against MongoDB Server
- CVE-2020-7922 Kubernetes Operator generates potentially insecure certificates
- CVE-2020-7921 Administrative action may disable enforcement of per-user IP whitelisting
- CVE-2020-7920 Denial of service in percona:monitoring and management
- CVE-2020-7919 Helm uses crypto package vulnerable to panic from malformed X.509 certificate
- CVE-2020-7918 Missing authorization in totemo:totemomail
- CVE-2020-7916 Privilege escalation in thimpress:learnpress
- CVE-2020-7915 Cross-site scripting in eaton:5p 850 firmware
- CVE-2020-7914 Misconfiguration in jetbrains:intellij idea
- CVE-2020-7913 Cross-site scripting in jetbrains:youtrack
- CVE-2020-7912 Missing authorization in jetbrains:youtrack
- CVE-2020-7911 Cross-site scripting in jetbrains:teamcity
- CVE-2020-7910 Cross-site scripting in jetbrains:teamcity
- CVE-2020-7909 Information disclosure in jetbrains:teamcity
- CVE-2020-7908 Other in jetbrains:teamcity
- CVE-2020-7907 Weak cryptography in jetbrains:scala
- CVE-2020-7906 Security feature bypass in jetbrains:rider