Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 55 of 215.
- CVE-2020-5519 Other in litespeedtech:openlitespeed
- CVE-2020-5517 Cross-site request forgery in blueonyx:5209r firmware
- CVE-2020-5515 SQL injection in gilacms:gila cms
- CVE-2020-5514 File upload in gilacms:gila cms
- CVE-2020-5513 Path traversal in gilacms:gila cms
- CVE-2020-5512 Path traversal in gilacms:gila cms
- CVE-2020-5511 SQL injection in small crm project:small crm
- CVE-2020-5510 SQL injection in phpgurukul:hostel management system
- CVE-2020-5509 File upload in phpgurukul:car rental portal
- CVE-2020-5505 File upload in vaaip:freelancy
- CVE-2020-5504 phpMyAdmin SQL injection in user accounts page
- CVE-2020-5502 phpBB allows CSRF
- CVE-2020-5501 phpBB Cross-Site Request Forgery (CSRF)
- CVE-2020-5499 Race condition in apache:rust sgx sdk
- CVE-2020-5497 XSS in MITREid Connect
- CVE-2020-5496 Memory corruption in fontforge:fontforge
- CVE-2020-5428 Possibility of SQL Injection in Spring Cloud Task Execution Sorting Query
- CVE-2020-5427 Possibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting Query
- CVE-2020-5426 Scheduler for TAS can transmit privileged UAA token in plaintext
- CVE-2020-5425 User Impersonation possible in Tanzu SSO
- CVE-2020-5423 Cloud Controller is vulnerable to denial of service via YAML parsing
- CVE-2020-5422 UAA password may appear in BOSH System Metrics Server process arguments
- CVE-2020-5421 RFD Protection Bypass via jsessionid
- CVE-2020-5420 Gorouter is vulnerable to DoS attack via invalid HTTP responses
- CVE-2020-5419 RabbitMQ arbitrary code execution using local binary planting
- CVE-2020-5418 Cloud Controller allows users with no roles to list droplets
- CVE-2020-5417 Cloud Controller may allow developers to claim sensitive routes
- CVE-2020-5416 CF clusters with NGINX in front of them may be vulnerable to DoS
- CVE-2020-5415 Concourse's GitLab auth allows impersonation
- CVE-2020-5414 App Autoscaler logs credentials
- CVE-2020-5413 Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"
- CVE-2020-5412 Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboard
- CVE-2020-5411 Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"
- CVE-2020-5410 VMware Tanzu Spring Cloud Config Directory Traversal
- CVE-2020-5409 Concourse Open Redirect in the /sky/login endpoint
- CVE-2020-5408 Dictionary attack with Spring Security queryable text encryptor
- CVE-2020-5407 Signature Wrapping Vulnerability with spring-security-saml2-service-provider
- CVE-2020-5406 PCF Autoscaling logs its database credentials
- CVE-2020-5405 Directory Traversal with spring-cloud-config-server
- CVE-2020-5404 Authentication Leak On Redirect With Reactor Netty HttpClient
- CVE-2020-5403 DoS Via Malformed URL with Reactor Netty HTTP Server
- CVE-2020-5402 UAA fails to check the state parameter when authenticating with external IDPs
- CVE-2020-5401 Cloud Foundry GoRouter is vulnerable to cache poisoning
- CVE-2020-5400 Cloud Controller logs environment variables from app manifests
- CVE-2020-5399 CredHub does not properly enable TLS for MySQL database connections
- CVE-2020-5398 RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
- CVE-2020-5397 CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux
- CVE-2020-5396 JMX Insecure Default Configuration in GemFire
- CVE-2020-5395 Use after free in fedoraproject:fedora
- CVE-2020-5393 Cross-site scripting in appspace:on-prem
- CVE-2020-5392 Cross-site scripting in auth0:wp-auth0
- CVE-2020-5391 Cross-site request forgery in auth0:wp-auth0
- CVE-2020-5390 Improper Verification of Cryptographic Signature in PySAML2
- CVE-2020-5389 Information disclosure in OMIMSSC (OpenManage Integration for Microsoft System Center)
- CVE-2020-5388 Memory corruption in CPG BIOS
- CVE-2020-5387 Denial of service in CPG BIOS
- CVE-2020-5386 Information disclosure in Elastic Cloud Storage
- CVE-2020-5385 Privilege escalation in Dell Encryption Enterprise
- CVE-2020-5384 Auth bypass in RSA Authentication Agent for Microsoft Windows
- CVE-2020-5383 Memory corruption in Isilon OneFS
- CVE-2020-5379 Memory corruption in CPG BIOS
- CVE-2020-5378 Use after free in CPG BIOS
- CVE-2020-5377 Path traversal in Dell Open Manage Server Administrator
- CVE-2020-5376 Use after free in CPG BIOS
- CVE-2020-5374 Hardcoded credentials in OMIMSSC (OpenManage Integration for Microsoft System Center)
- CVE-2020-5373 Auth bypass in OMIMSSC (OpenManage Integration for Microsoft System Center)
- CVE-2020-5372 Misconfiguration in PowerStore
- CVE-2020-5371 Misconfiguration in Isilon OneFS
- CVE-2020-5370 Path traversal in OpenManage Enterprise
- CVE-2020-5369 Privilege escalation in Isilon OneFS
- CVE-2020-5368 Missing authorization in VxRail
- CVE-2020-5367 Security feature bypass in Unisphere for PowerMax, Unisphere for PowerMax Virtual Appliance, PowerMax OS
- CVE-2020-5366 Path traversal in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2020-5365 Hardcoded credentials in Isilon OneFS
- CVE-2020-5364 Hardcoded credentials in Isilon OneFS
- CVE-2020-5363 Auth bypass in Dell Client Consumer and Commercial platforms
- CVE-2020-5362 Missing authorization in Dell Client Consumer and Commercial platforms
- CVE-2020-5361 Auth bypass in CPG BIOS
- CVE-2020-5360 Memory corruption in Dell BSAFE Micro Edition Suite
- CVE-2020-5359 Weak cryptography in Dell BSAFE Micro Edition Suite
- CVE-2020-5358 Privilege escalation in Dell Encryption Enterprise
- CVE-2020-5357 Race condition in CPG BIOS
- CVE-2020-5356 Missing authorization in Power Protect Data Manager
- CVE-2020-5355 Misconfiguration in Isilon OneFS
- CVE-2020-5353 Misconfiguration in Isilon OneFS
- CVE-2020-5352 Command injection in Data Protection Advisor
- CVE-2020-5351 Hardcoded credentials in Data Protection Advisor
- CVE-2020-5350 Command injection in Integrated Data Protection Appliance
- CVE-2020-5349 Hardcoded credentials in Networking
- CVE-2020-5348 Use after free in CPG BIOS
- CVE-2020-5347 Denial of service in Isilon OneFS
- CVE-2020-5346 Cross-site scripting in RSA Authentication Manager
- CVE-2020-5345 Missing authorization in Unisphere for PowerMax
- CVE-2020-5344 Memory corruption in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2020-5343 Misconfiguration in CPG SW
- CVE-2020-5342 Misconfiguration in Dell Digital Delivery (Cirrus)
- CVE-2020-5341 Deserialization in Avamar Virtual Edition
- CVE-2020-5340 Cross-site scripting in RSA Authentication Manager
- CVE-2020-5339 Cross-site scripting in RSA Authentication Manager
- CVE-2020-5337 Open redirect in RSA Archer