Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 43 of 215.
- CVE-2020-7049 Code injection in nozominetworks:guardian
- CVE-2020-7048 Missing authorization in webfactoryltd:wp database reset
- CVE-2020-7047 Privilege escalation in webfactoryltd:wp database reset
- CVE-2020-7046 Denial of service in dovecot:dovecot
- CVE-2020-7045 Null dereference in debian:debian linux
- CVE-2020-7044 Memory corruption in fedoraproject:fedora
- CVE-2020-7043 Security feature bypass in fedoraproject:fedora
- CVE-2020-7042 Security feature bypass in fedoraproject:fedora
- CVE-2020-7041 Security feature bypass in fedoraproject:fedora
- CVE-2020-7040 Race condition in canonical:ubuntu linux
- CVE-2020-7039 Memory corruption in debian:debian linux
- CVE-2020-7038 Avaya Meetings Server Information Disclosure vulnerability
- CVE-2020-7037 Avaya Equinox Conferencing XXE vulnerability
- CVE-2020-7036 XXE in Avaya Callback Assist Administration
- CVE-2020-7035 XXE in Avaya Aura Orchestration Designer
- CVE-2020-7034 Command injection in Avaya Session Border Controller for Enterprise
- CVE-2020-7033 Avaya Equinox Conferencing XSS
- CVE-2020-7032 Avaya WebLM Improper Restriction of XML External Entity Reference
- CVE-2020-7030 IPO Information Disclosure
- CVE-2020-7029 Avaya Product System Management Interface Cross-Site Request Forgery Vulnerability
- CVE-2020-7021 Insertion of Sensitive Information into Log File in Elasticsearch
- CVE-2020-7020 Privilege Context Switching Error in Elasticsearch
- CVE-2020-7019 Improper privilege management in elasticsearch
- CVE-2020-7018 Privilege escalation in Elastic Enterprise Search
- CVE-2020-7017 Cross-site scripting in Kibana
- CVE-2020-7016 Denial of service in Kibana
- CVE-2020-7015 Cross-site scripting in Kibana
- CVE-2020-7014 Privilege Escalation Flaw in Elasticsearch
- CVE-2020-7013 Code injection in Kibana
- CVE-2020-7012 Code injection in Kibana
- CVE-2020-7011 Cross-site scripting in Elastic App Search
- CVE-2020-7010 Cryptographic Issues in ECK
- CVE-2020-7009 Improper Privilege Management in Elasticsearch
- CVE-2020-7008 Path traversal in VBASE Editor
- CVE-2020-7007 Memory corruption in Moxa EDS-G516E Series firmware, Version 5.2 or lower
- CVE-2020-7006 Cross-site scripting in Systech Corporation NDS-5000 Terminal Server
- CVE-2020-7005 Cross-site request forgery in Honeywell WIN-PAK 4.7.2, Web and prior versions
- CVE-2020-7004 Misconfiguration in VBASE Editor
- CVE-2020-7003 Information disclosure in Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower
- CVE-2020-7002 Memory corruption in Delta Industrial Automation CNCSoft ScreenEditor
- CVE-2020-7001 Weak cryptography in Moxa EDS-G516E Series firmware, Version 5.2 or lower
- CVE-2020-7000 Information disclosure in VBASE Editor
- CVE-2020-6999 Memory corruption in Moxa EDS-G516E Series firmware, Version 5.2 or lower
- CVE-2020-6998 Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input Validation
- CVE-2020-6997 Information disclosure in Moxa EDS-G516E Series firmware, Version 5.2 or lower
- CVE-2020-6996 Memory corruption in Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01
- CVE-2020-6995 Weak cryptography in Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower
- CVE-2020-6994 Memory corruption in HiOS for the following devices RSP, RSPE, RSPS, RSPL, MSP, EES, EES, EESX, GRS, OS, RED
- CVE-2020-6993 Information disclosure in Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower
- CVE-2020-6992 Privilege escalation in GE Digital CIMPLICITY
- CVE-2020-6991 Weak cryptography in Moxa EDS-G516E Series firmware, Version 5.2 or lower
- CVE-2020-6990 Hardcoded credentials in Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior
- CVE-2020-6989 Memory corruption in Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower
- CVE-2020-6988 Auth bypass in Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior
- CVE-2020-6987 Weak cryptography in Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower
- CVE-2020-6986 Denial of service in Omron PLC CJ Series
- CVE-2020-6985 Hardcoded credentials in Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower
- CVE-2020-6984 Weak cryptography in Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior
- CVE-2020-6983 Hardcoded credentials in Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower
- CVE-2020-6982 Code injection in Honeywell WIN-PAK 4.7.2, Web and prior versions
- CVE-2020-6981 Hardcoded credentials in Moxa EDS-G516E Series firmware, Version 5.2 or lower
- CVE-2020-6980 Information disclosure in Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior
- CVE-2020-6979 Hardcoded credentials in Moxa EDS-G516E Series firmware, Version 5.2 or lower
- CVE-2020-6978 Supply chain in Honeywell WIN-PAK 4.7.2, Web and prior versions
- CVE-2020-6977 Security feature bypass in GE Ultrasound Products
- CVE-2020-6976 Memory corruption in Delta Industrial Automation CNCSoft ScreenEditor
- CVE-2020-6975 File upload in Digi International ConnectPort LTS 32 MEI
- CVE-2020-6974 Path traversal in Honeywell Notifier Web Server (NWS)
- CVE-2020-6973 Cross-site scripting in Digi International ConnectPort LTS 32 MEI
- CVE-2020-6972 Auth bypass in Notifier Web Server (NWS) Version 3.50 and earlier
- CVE-2020-6971 Privilege escalation in Emerson ValveLink
- CVE-2020-6970 Memory corruption in OpenEnterprise
- CVE-2020-6969 Information disclosure in C-More Touch Panels EA9 series
- CVE-2020-6968 Privilege escalation in INNCOM INNControl 3
- CVE-2020-6967 Deserialization in Rockwell Automation All versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform
- CVE-2020-6966 Weak cryptography in GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center systems,CARESCAPE B450,B650,B850 Monitors
- CVE-2020-6965 File upload in GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center systems,CARESCAPE B450,B650,B850 Monitors
- CVE-2020-6964 Auth bypass in GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center systems,CARESCAPE B450,B650,B850 Monitors
- CVE-2020-6963 Hardcoded credentials in GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center systems,CARESCAPE B450,B650,B850 Monitors
- CVE-2020-6962 Code injection in GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center,CARESCAPE B450,B650,B850 Monitors
- CVE-2020-6961 Information disclosure in GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center,CARESCAPE B450,B650,B850 Monitors
- CVE-2020-6960 SQL injection in Honeywell Maxpro VMS & NVR
- CVE-2020-6959 Deserialization in Honeywell Maxpro VMS & NVR
- CVE-2020-6958 XML external entity in yet another java service wrapper project:yet another java service wrapper
- CVE-2020-6956 Cross-site scripting in pcs:dexicon enterprise
- CVE-2020-6955 Cross-site scripting in cayintech:smp-pro4 firmware
- CVE-2020-6954 Information disclosure in cayintech:smp-pro4 firmware
- CVE-2020-6950 Directory traversal in Eclipse Mojarra
- CVE-2020-6949 Privilege escalation in hashbrowncms:hashbrown cms
- CVE-2020-6948 HashBrown CMS RCE
- CVE-2020-6939 Missing authorization in Tableau Server
- CVE-2020-6938 Information disclosure in Tableau
- CVE-2020-6937 Denial of service in MuleSoft Mule CE/EE
- CVE-2020-6933 Denial of service in BlackBerry UEM
- CVE-2020-6932 Code injection in QNX Software Development Platform (SDP)
- CVE-2020-6931 Privilege escalation in HP Print and Scan Doctor
- CVE-2020-6923 HP Linux Imaging and Printing Software - Potential Memory Buffer Overflow
- CVE-2020-6922 Other in HP Support Assistant
- CVE-2020-6921 Other in HP Support Assistant
- CVE-2020-6920 Other in HP Support Assistant