Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 38 of 215.
- CVE-2020-7669 Arbitrary File Write via Archive Extraction (Zip Slip)
- CVE-2020-7668 Arbitrary File Write via Archive Extraction (Zip Slip)
- CVE-2020-7667 Arbitrary File Write via Archive Extraction (Zip Slip)
- CVE-2020-7666 Arbitrary File Write via Archive Extraction (Zip Slip)
- CVE-2020-7665 Arbitrary File Write via Archive Extraction (Zip Slip)
- CVE-2020-7664 Arbitrary File Write via Archive Extraction (Zip Slip)
- CVE-2020-7663 Regular Expression Denial of Service in websocket-extensions (RubyGem)
- CVE-2020-7662 Regular Expression Denial of Service in websocket-extensions (NPM package)
- CVE-2020-7661 Regular expression denial of service in url-regex
- CVE-2020-7660 Insecure serialization leading to RCE in serialize-javascript
- CVE-2020-7659 HTTP Request Smuggling in reel
- CVE-2020-7658 meinheld vulnerable to HTTP Request Smuggling
- CVE-2020-7656 Cross-Site Scripting in jquery
- CVE-2020-7655 HTTP Request Smuggling in netius
- CVE-2020-7654 Information Exposure in Snyk Broker
- CVE-2020-7653 Arbitrary File Read in Snyk Broker
- CVE-2020-7652 Arbitrary File Read in Snyk Broker
- CVE-2020-7651 Arbitrary File Read in Snyk Broker
- CVE-2020-7650 Arbitrary File Read in Snyk Broker
- CVE-2020-7649 Directory Traversal
- CVE-2020-7648 Arbitrary File Read in Snyk Broker
- CVE-2020-7647 path traversal in Jooby
- CVE-2020-7646 curlrequest allows execution of arbitrary commands
- CVE-2020-7645 chrome-launcher subject to OS Command Injection
- CVE-2020-7644 Uncontrolled Resource Consumption in fun-map
- CVE-2020-7643 Prototype pollution in paypal-adaptive
- CVE-2020-7642 Cross-site scripting in lazysizes
- CVE-2020-7641 Prototype Pollution
- CVE-2020-7640 OS Command Injection in pixl-class
- CVE-2020-7639 eivindfjeldstad-dot contains prototype pollution vulnerability
- CVE-2020-7638 confinit vulnerable to prototype pollution
- CVE-2020-7637 Prototype pollution in class-transformer
- CVE-2020-7636 OS Command Injection in adb-driver
- CVE-2020-7635 Command Injection in compass-compile
- CVE-2020-7634 OS Command Injection in heroku-addonpool
- CVE-2020-7633 apiconnect-cli-plugins vulnerable to OS Command Injection
- CVE-2020-7632 OS Command Injection in node-mpv
- CVE-2020-7631 OS Command Injection in diskusage-ng
- CVE-2020-7630 OS Command Injection in git-add-remote
- CVE-2020-7629 OS Command Injection in install-package
- CVE-2020-7628 Command Injection in umount
- CVE-2020-7627 OS Command Injection in node-key-sender
- CVE-2020-7626 karma-mojo enables OS Command Injection
- CVE-2020-7625 Injection in op-browser
- CVE-2020-7624 Command injection in effect
- CVE-2020-7623 OS Command Injection in jscover
- CVE-2020-7622 HTTP Response Splitting
- CVE-2020-7621 OS Command Injection in strong-nginx-controller
- CVE-2020-7620 OS Command Injection in pomelo-monitor
- CVE-2020-7619 Command injection in get-git-data
- CVE-2020-7618 Prototype Pollution in sds
- CVE-2020-7617 Prototype Pollution
- CVE-2020-7616 Improperly Controlled Modification of Dynamically-Determined Object Attributes in express-mock-middleware
- CVE-2020-7615 OS Command Injection in fsa
- CVE-2020-7614 Command Injection in npm-programmatic
- CVE-2020-7613 Clamscan vulnerable to command injection
- CVE-2020-7611 Micronaut's HTTP client is vulnerable to HTTP Request Header Injection
- CVE-2020-7610 Deserialization of Untrusted Data in bson
- CVE-2020-7609 Code Injection in node-rules
- CVE-2020-7608 yargs-parser Vulnerable to Prototype Pollution
- CVE-2020-7607 OS Command Injection in gulkp-styledocco
- CVE-2020-7606 OS Command Injection in docker-compose-remote-api
- CVE-2020-7605 OS Command Injection in gulp-tape
- CVE-2020-7604 OS Command Injection in pulverizr
- CVE-2020-7603 OS Command Injection in closure-compiler-stream
- CVE-2020-7602 OS Command Injection in node-prompt-here
- CVE-2020-7601 OS Command Injection in gulp-scss-lint
- CVE-2020-7600 Improperly Controlled Modification of Dynamically-Determined Object Attributes in querymen
- CVE-2020-7599 Exposure of Sensitive Information in Gradle publish plugin
- CVE-2020-7598 Prototype Pollution in minimist
- CVE-2020-7597 codecov NPM module allows remote attackers to execute arbitrary commands
- CVE-2020-7596 Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov
- CVE-2020-7595 libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation
- CVE-2020-7594 Command injection in multitech:conduit mtcdt-lvw2-246a firmware
- CVE-2020-7593 Memory corruption in LOGO! 8 BM (incl. SIPLUS variants)
- CVE-2020-7592 Information disclosure in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants)
- CVE-2020-7591 Auth bypass in SIPORT MP
- CVE-2020-7590 Hardcoded credentials in DCA Vantage Analyzer
- CVE-2020-7589 Missing authorization in LOGO! 8 BM (incl. SIPLUS variants)
- CVE-2020-7588 Denial of service in Opcenter Execution Discrete
- CVE-2020-7587 Denial of service in Opcenter Execution Discrete
- CVE-2020-7586 Memory corruption in SIMATIC PCS 7 V8.2 and earlier
- CVE-2020-7585 Privilege escalation in SIMATIC PCS 7 V8.2 and earlier
- CVE-2020-7584 Denial of service in SIMATIC S7-200 SMART CPU family
- CVE-2020-7583 Missing authorization in Automation License Manager 5
- CVE-2020-7581 Privilege escalation in Opcenter Execution Discrete
- CVE-2020-7580 Privilege escalation in SIMATIC Automation Tool
- CVE-2020-7579 Cross-site scripting in Spectrum Power™ 5
- CVE-2020-7578 Privilege escalation in Camstar Enterprise Platform
- CVE-2020-7577 SQL injection in Camstar Enterprise Platform
- CVE-2020-7576 Cross-site scripting in Camstar Enterprise Platform
- CVE-2020-7575 Cross-site scripting in Climatix POL908 (BACnet/IP module)
- CVE-2020-7574 Cross-site scripting in Climatix POL908 (BACnet/IP module)
- CVE-2020-7573 Missing authorization in EcoStruxure Building Operation WebReports V1.9 - V3.1
- CVE-2020-7572 XML external entity in EcoStruxure Building Operation WebReports V1.9 - V3.1
- CVE-2020-7571 Cross-site scripting in EcoStruxure Building Operation WebReports V1.9 - V3.1
- CVE-2020-7570 Cross-site scripting in EcoStruxure Building Operation WebReports V1.9 - V3.1
- CVE-2020-7569 File upload in EcoStruxure Building Operation WebReports V1.9 - V3.1
- CVE-2020-7568 Information disclosure in Modicon M221, all references, all versions
- CVE-2020-7567 Weak cryptography in Modicon M221, all references, all versions