Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 56 of 215.
- CVE-2020-5336 Cross-site scripting in RSA Archer
- CVE-2020-5335 Cross-site request forgery in RSA Archer
- CVE-2020-5334 Cross-site scripting in RSA Archer
- CVE-2020-5333 Missing authorization in RSA Archer
- CVE-2020-5332 Command injection in RSA Archer
- CVE-2020-5331 Information disclosure in RSA Archer
- CVE-2020-5330 Information disclosure in Dell PowerConnect
- CVE-2020-5329 Open redirect in Avamar
- CVE-2020-5328 Missing authorization in Isilon OneFS
- CVE-2020-5327 Deserialization in Dell Encryption Enterprise
- CVE-2020-5326 Auth bypass in Dell Client Consumer and Commercial Platforms
- CVE-2020-5324 Race condition in Dell Client Consumer and Commercial Platforms
- CVE-2020-5323 Code injection in Dell OpenManage Enterprise
- CVE-2020-5322 Command injection in Dell OpenManage Enterprise Modular
- CVE-2020-5321 Privilege escalation in Dell OpenManage Enterprise
- CVE-2020-5320 SQL injection in Dell OpenManage Enterprise
- CVE-2020-5319 Denial of service in Unity
- CVE-2020-5318 Auth bypass in Isilon OneFS
- CVE-2020-5317 Cross-site scripting in Elastic Cloud Storage
- CVE-2020-5316 Privilege escalation in Dell SupportAssist Client
- CVE-2020-5315 Information disclosure in Dell EMC Repository Manager (DRM)
- CVE-2020-5313 Out-of-bounds Read in Pillow
- CVE-2020-5312 PCX P mode buffer overflow in Pillow
- CVE-2020-5311 Buffer Copy without Checking Size of Input in Pillow
- CVE-2020-5310 Integer overflow in Pillow
- CVE-2020-5308 Cross-site scripting in phpgurukul:dairy farm shop management system
- CVE-2020-5307 SQL injection in phpgurukul:dairy farm shop management system
- CVE-2020-5306 Cross-site scripting in codologic:codoforum
- CVE-2020-5305 Cross-site scripting in codologic:codoforum
- CVE-2020-5304 Other in whitesourcesoftware:whitesource
- CVE-2020-5303 Denial of service in Tendermint
- CVE-2020-5302 unprivileged user can access priviledged action in MH-WikiBot
- CVE-2020-5301 Information disclosure of source code in SimpleSAMLphp
- CVE-2020-5300 Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydra
- CVE-2020-5299 Potential CSV Injection vector in OctoberCMS
- CVE-2020-5298 Reflected XSS when importing CSV in OctoberCMS
- CVE-2020-5297 Upload whitelisted files to any directory in OctoberCMS
- CVE-2020-5296 Arbitrary File Deletion vulnerability in OctoberCMS
- CVE-2020-5295 Local File read vulnerability in OctoberCMS
- CVE-2020-5294 Reflected XSS with social networks fields
- CVE-2020-5293 Improper access control on product page with combinations, attachments and specific prices in PrestaShop
- CVE-2020-5292 Time-based blind injection in Leantime
- CVE-2020-5291 Privilege escalation in setuid mode via user namespaces in Bubblewrap
- CVE-2020-5290 session fixation in rCTF
- CVE-2020-5289 Read permissions not enforced for client provided filter expressions in Elide http client
- CVE-2020-5288 Improper access control on product attributes page in PrestaShop
- CVE-2020-5287 Improper access control on customers search in PrestaShop
- CVE-2020-5286 Reflected XSS related in import page in PrestaShop
- CVE-2020-5285 Reflected XSS with back parameter in PrestaShop
- CVE-2020-5284 Directory Traversal in Next.js versions below 9.3.2
- CVE-2020-5283 XSS vulnerability in CVS show_subdir_lastmod support
- CVE-2020-5282 arbitrary shell execution in Nick Chan Bot
- CVE-2020-5281 LDAP connector injection in Perun
- CVE-2020-5280 Local file inclusion vulnerability in http4s
- CVE-2020-5279 Improper Access Control for certain legacy controller in PrestaShop
- CVE-2020-5278 Reflected XSS on Exception page of PrestaShop
- CVE-2020-5277 Reflected XSS with url_name parameter of PrestaShop module ps_facetedsearch
- CVE-2020-5276 Reflected XSS on AdminCarts page of PrestaShop
- CVE-2020-5275 Firewall configured with unanimous strategy was not actually unanimous in symfony/security-http
- CVE-2020-5274 Exceptions displayed in non-debug configurations in Symfony
- CVE-2020-5273 Stored XSS with custom URLs in PrestaShop module ps_linklist
- CVE-2020-5272 Reflected XSS on Search page of PrestaShop
- CVE-2020-5271 Reflected XSS with dashboard calendar of PrestaShop
- CVE-2020-5270 Open redirection when using back parameter of PrestaShop
- CVE-2020-5269 Reflected XSS on AdminFeatures page of PrestaShop
- CVE-2020-5268 Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET
- CVE-2020-5267 Possible XSS vulnerability in ActionView
- CVE-2020-5266 Stored XSS on back office edit page
- CVE-2020-5265 Reflected XSS on AdminAttributesGroups page of PrestaShop
- CVE-2020-5264 Reflected XSS in security compromised page of PrestaShop
- CVE-2020-5263 Information disclosure through error object
- CVE-2020-5262 GitHub personal access token leaking into temporary EasyBuild (debug) logs
- CVE-2020-5261 Missing Token Replay Detection
- CVE-2020-5260 malicious URLs may cause Git to present stored credentials to the wrong server
- CVE-2020-5259 Prototype Pollution in Dojox
- CVE-2020-5258 Prototype pollution in dojo
- CVE-2020-5257 Sort order SQL injection in Administrate
- CVE-2020-5256 Remote Code Execution Through Image Uploads in BookStack
- CVE-2020-5255 Prevent cache poisoning via a Response Content-Type header
- CVE-2020-5254 NetHack hilite_status parsing privilege escalation
- CVE-2020-5253 Privilege escalation in NetHack
- CVE-2020-5252 Malicious package may avoid detection in python auditing
- CVE-2020-5251 Information disclosure in parse-server
- CVE-2020-5250 Possible information disclosure in PrestaShop
- CVE-2020-5249 HTTP Response Splitting (Early Hints) in Puma
- CVE-2020-5248 Public GLPIKEY can be used to decrypt any data in GLPI
- CVE-2020-5247 HTTP Response Splitting in Puma
- CVE-2020-5246 LDAP injection vulnerability in Traccar GPS Tracking System
- CVE-2020-5245 Remote Code Execution (RCE) vulnerability in dropwizard-validation
- CVE-2020-5244 Private data exposure via REST API in BuddyPress
- CVE-2020-5243 Denial of Service in uap-core when processing crafted User-Agent strings
- CVE-2020-5242 openHAB exec add-ons allow remote arbitrary command execution
- CVE-2020-5241 XSS/Script injection vulnerability in matestack
- CVE-2020-5240 2FA bypass through deleting devices in wagtail-2fa
- CVE-2020-5239 Unspecified vulnerability in the fetchmail script in Mailu
- CVE-2020-5238 Denial of service in table parsing in cmark-gfm
- CVE-2020-5237 Relative Path Traversal in oneup/uploader-bundle
- CVE-2020-5236 Catastrophic backtracking in regex allows Denial of Service in Waitress
- CVE-2020-5235 Out-of-memory condition in Nanopb is potentially exploitable
- CVE-2020-5234 Untrusted data can lead to DoS attack in MessagePack for C# and Unity