Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 41 of 215.
- CVE-2020-7284 Network Security Management (NSM) - Exposure of Sensitive Information
- CVE-2020-7283 Privilege Escalation vulnerability in McAfee Total Protection (MTP)
- CVE-2020-7282 Privilege Escalation vulnerability in McAfee Total Protection (MTP)
- CVE-2020-7281 Privilege Escalation vulnerability in McAfee Total Protection (MTP)
- CVE-2020-7280 Symbolic Link vulnerability during DAT update
- CVE-2020-7279 DLL search order hijacking in Host IPS
- CVE-2020-7278 McAfee firewall rules not enforced correctly
- CVE-2020-7277 McAfee processes not protected
- CVE-2020-7276 Unrestricted Policy Management using MfeUpgradeTool.exe
- CVE-2020-7275 Unquoted service paths for some McAfee ENS files
- CVE-2020-7274 ENS elevated permissions vulnerability
- CVE-2020-7273 Autorun registry bypass
- CVE-2020-7270 Sensitive Information Exposure in McAfee ATD
- CVE-2020-7269 Sensitive Information Exposure in McAfee ATD
- CVE-2020-7268 McAfee Email Gateway (MEG) - Path Traversal vulnerability
- CVE-2020-7267 Privilege Escalation vulnerability through symbolic links in VSEL
- CVE-2020-7266 Privilege Escalation vulnerability through symbolic links in VSE for Windows
- CVE-2020-7265 Privilege Escalation vulnerability through symbolic links in ENSM
- CVE-2020-7264 Privilege Escalation vulnerability through symbolic links in ENS for Windows
- CVE-2020-7263 ENS configuration can be edited by attacker with local administrator permissions
- CVE-2020-7262 Improper Access Control vulnerability in ATD
- CVE-2020-7261 Buffer overwrite in ENS allowed to bypass AMSI protection
- CVE-2020-7260 MACC installer DLL side loading
- CVE-2020-7259 Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules
- CVE-2020-7258 Network Security Management (NSM) - Cross site scripting vulnerability
- CVE-2020-7257 Privilege Escalation vulnerability through Symbolic links in ENS
- CVE-2020-7256 Network Security Management (NSM) - Cross site scripting vulnerability
- CVE-2020-7255 Privilege Escalation vulnerability in ENS
- CVE-2020-7254 Privilege escalation in Advanced Threat Defense
- CVE-2020-7253 Improper access control vulnerability in McAfee Agent
- CVE-2020-7252 Unquoted service executable path
- CVE-2020-7251 ESConfig Tool able to edit configuration for newer version
- CVE-2020-7250 ENS symbolic link log file manipulation vulnerability
- CVE-2020-7249 Cross-site scripting in smc:d3g0804 firmware
- CVE-2020-7248 Memory corruption in openwrt:openwrt
- CVE-2020-7247 OpenSMTPD Remote Code Execution
- CVE-2020-7246 File upload in qdpm:qdpm
- CVE-2020-7245 Business logic in ctfd:ctfd
- CVE-2020-7244 Command injection in comtech:stampede fx-1010 firmware
- CVE-2020-7243 Command injection in comtech:stampede fx-1010 firmware
- CVE-2020-7242 Command injection in comtech:stampede fx-1010 firmware
- CVE-2020-7241 Information disclosure in wpseeds:wp database backup
- CVE-2020-7240 Command injection in meinbergglobal:lantime m1000 firmware
- CVE-2020-7239 Cross-site scripting in ibm:chatbot with ibm watson
- CVE-2020-7238 HTTP Request Smuggling in Netty
- CVE-2020-7237 Command injection in cacti:cacti
- CVE-2020-7236 Cross-site scripting in uhp:uhp-100 firmware
- CVE-2020-7235 Cross-site scripting in uhp:uhp-100 firmware
- CVE-2020-7234 Cross-site scripting in ruckuswireless:r310 firmware
- CVE-2020-7233 Hardcoded credentials in kmccontrols:bac-a1616bc firmware
- CVE-2020-7232 Information disclosure in evoko:home
- CVE-2020-7231 Information disclosure in evoko:home
- CVE-2020-7229 SQL injection in simplejobscript:simplejobscript
- CVE-2020-7228 Cross-site scripting in codepeople:calculated fields form
- CVE-2020-7227 Information disclosure in westermo:mrd-315 firmware
- CVE-2020-7226 Denial of Service in Cryptacular
- CVE-2020-7224 Security feature bypass in aviatrix:openvpn
- CVE-2020-7222 Auth bypass in amcrest:web server
- CVE-2020-7221 Privilege escalation in mariadb:mariadb
- CVE-2020-7220 Improper Resource Shutdown or Release in HashiCorp Vault
- CVE-2020-7219 Denial of Service (DoS) in HashiCorp Consul
- CVE-2020-7218 Allocation of Resources Without Limits or Throttling in HashiCorp Nomad
- CVE-2020-7217 Denial of service in opensuse:wicked
- CVE-2020-7216 Denial of service in opensuse:leap
- CVE-2020-7215 Information disclosure in gallagher:command centre
- CVE-2020-7213 Weak cryptography in parallels:parallels
- CVE-2020-7212 Uncontrolled Resource Consumption in urllib3
- CVE-2020-7211 Path traversal in libslirp project:libslirp
- CVE-2020-7210 Umbraco CMS vulnerable to CSRF
- CVE-2020-7209 Other in LinuxKI
- CVE-2020-7208 Cross-site scripting in LinuxKI
- CVE-2020-7207 Privilege escalation in HPE ProLiant BL460c Gen10 Server Blade; HPE ProLiant DL360 Gen10 Server; HPE ProLiant DL380 Gen10 Server; HPE ProLiant DL560 Gen10 Server; HPE ProLiant DL580 Gen10 Server; HPE ProLiant ML110 Gen10 Server; HPE ProLiant XL230k Gen10 Server; HPE Synergy 480 Gen10 Compute Module; HPE Synergy 660 Gen10 Compute Module; HPE ProLiant DL180 Gen10 Server; HPE ProLiant DL160 Gen10 Server; HPE ProLiant DL120 Gen10 Server; HPE ProLiant XL190r Gen10 Server; HPE ProLiant ML350 Gen10 Server; HPE ProLiant XL170r Gen10 Server; HPE Apollo 2000 System; HPE Apollo 4500 System; HPE ProLiant XL270d Gen10 Server; HPE Apollo 4200 Gen10 Server; HPE ProLiant e910 Server Blade; HPE ProLiant XL450 Gen10 Server; HPE ProLiant XL230k Gen10 Server - bad oid
- CVE-2020-7206 Code injection in nagios-plugins-ilo
- CVE-2020-7205 Security feature bypass in HP Intelligent Provisioning
- CVE-2020-7203 Other in iLO Amplifier Pack
- CVE-2020-7202 Information disclosure in HPE ProLiant Servers, Apollo Products, Converged Systems, and Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5), or Integrated Lights-Out 4 (iLO 4)
- CVE-2020-7201 Cross-site request forgery in HPE StoreEver MSL Tape Libraries; HPE StoreEver 1/8 G2 Tape Autoloaders
- CVE-2020-7200 Other in HPE Systems Insight Manager (SIM)
- CVE-2020-7199 Auth bypass in HPE Edgeline Infrastructure Management Software
- CVE-2020-7198 Privilege escalation in HP OneView; HPE Synergy Composer; HPE Synergy Composer 2
- CVE-2020-7197 Auth bypass in HPE 3PAR StoreServ Management and Core Software Media
- CVE-2020-7196 Information disclosure in BlueData EPIC Software; HPE Ezmeral Container Platform
- CVE-2020-7195 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7194 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7193 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7192 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7191 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7190 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7189 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7188 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7187 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7186 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7185 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7184 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7183 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7182 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7181 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7180 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7179 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-7178 Code injection in HPE Intelligent Management Center (iMC)