Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 57 of 215.
- CVE-2020-5233 Open Redirect in OAuth2 Proxy
- CVE-2020-5232 Ethereum Name Service - Malicious takeover of previously owned ENS names
- CVE-2020-5231 Opencast users with ROLE_COURSE_ADMIN can create new users
- CVE-2020-5230 Opencast uses unsafe identifiers
- CVE-2020-5229 Opencast stores passwords using outdated MD5 hash algorithm
- CVE-2020-5228 Opencast allows unauthorized public access via OAI-PMH
- CVE-2020-5227 Feedgen Vulnerable to XML Denial of Service Attacks
- CVE-2020-5226 Cross-site scripting in SimpleSAMLphp
- CVE-2020-5225 Log injection in SimpleSAMLphp
- CVE-2020-5224 Session key exposure through session list in Django User Sessions
- CVE-2020-5223 Persistent XSS vulnerability in filename of attached file in PrivateBin
- CVE-2020-5222 Hard-Coded Key Used For Remember-me Token in OpenCast
- CVE-2020-5221 Directory Traversal (Chroot Escape) vulnerability in uftpd
- CVE-2020-5220 Ability to expose data in Sylius by using an unintended serialisation group
- CVE-2020-5219 Remote Code Execution in Angular Expressions
- CVE-2020-5218 Ability in Sylius to switch channels via GET parameter enabled in production environments
- CVE-2020-5217 Directive injection when using dynamic overrides with user input in RubyGems secure_headers
- CVE-2020-5216 Limited header injection when using dynamic overrides with user input in RubyGems secure_headers
- CVE-2020-5215 Segmentation faultin TensorFlow when converting a Python string to tf.float16
- CVE-2020-5214 NetHack error recovery after syntax error in configuration file is subject to a buffer overflow
- CVE-2020-5213 NetHack SYMBOL configuration file option is subject to a buffer overflow
- CVE-2020-5212 NetHack MENUCOLOR configuration file option is subject to a buffer overflow
- CVE-2020-5211 NetHack AUTOCOMPLETE configuration file option is subject to a buffer overflow
- CVE-2020-5210 NetHack command line -w option parsing is subject to a buffer overflow
- CVE-2020-5209 NetHack command line parsing of options starting with -de and -i is subject to a buffer overflow
- CVE-2020-5208 remote code execution vulnerability in ipmitool
- CVE-2020-5207 Request smuggling is possible in Ktor when both chunked TE and content length specified
- CVE-2020-5206 Authentication Bypass For Endpoints With Anonymous Access in OpenCast
- CVE-2020-5205 Session fixation attack in Pow (Hex package)
- CVE-2020-5204 Buffer overflow vulnerability in uftpd
- CVE-2020-5203 Fat-Free Framework arbitrary code execution
- CVE-2020-5202 Information disclosure in apt-cacher-ng project:apt-cacher-ng
- CVE-2020-5200 Minerbabe through V4.16 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identif
- CVE-2020-5197 Missing authorization in gitlab:gitlab
- CVE-2020-5196 Missing authorization in cerberusftp:ftp server
- CVE-2020-5195 Cross-site scripting in cerberusftp:ftp server
- CVE-2020-5194 Missing authorization in cerberusftp:ftp server
- CVE-2020-5193 Cross-site scripting in phpgurukul:hospital management system
- CVE-2020-5192 SQL injection in phpgurukul:hospital management system
- CVE-2020-5191 Cross-site scripting in phpgurukul:hospital management system
- CVE-2020-5188 DNN File Upload Vulnerability
- CVE-2020-5187 DNN Path Traversal via Zip Slip
- CVE-2020-5186 DNN XSS Vulnerability
- CVE-2020-5183 Memory corruption in ftpgetter:ftpgetter
- CVE-2020-5182 Other in cmsjunkie:j-businessdirectory
- CVE-2020-5180 Privilege escalation in sparklabs:viscosity
- CVE-2020-5179 Command injection in comtech:stampede fx-1010 firmware
- CVE-2020-5148 Auth bypass in Directory Services Connector
- CVE-2020-5147 Privilege escalation in SonicWall NetExtender
- CVE-2020-5146 Command injection in SMA100
- CVE-2020-5145 Other in SonicWall Global VPN Client
- CVE-2020-5144 Privilege escalation in SonicWall Global VPN Client
- CVE-2020-5143 Information disclosure in SonicOS
- CVE-2020-5142 Cross-site scripting in SonicOS
- CVE-2020-5141 Auth bypass in SonicOS
- CVE-2020-5140 Denial of service in SonicOS
- CVE-2020-5139 Memory corruption in SonicOS
- CVE-2020-5138 Memory corruption in SonicOS
- CVE-2020-5137 Memory corruption in SonicOS
- CVE-2020-5136 Memory corruption in SonicOS
- CVE-2020-5135 SonicWall SonicOS Buffer Overflow
- CVE-2020-5134 Memory corruption in SonicOS
- CVE-2020-5133 Memory corruption in SonicOS
- CVE-2020-5132 Misconfiguration in SMA100
- CVE-2020-5131 Other in SonicWall NetExtender
- CVE-2020-5130 Other in SonicOS
- CVE-2020-5129 Denial of service in SMA1000
- CVE-2020-5032 Denial of service in QRadar SIEM
- CVE-2020-5031 Cross-site scripting in Engineering Lifecycle Optimization
- CVE-2020-5030 Cross-site scripting in Engineering Lifecycle Optimization
- CVE-2020-5026 Information disclosure in Financial Transaction Manager
- CVE-2020-5025 Memory corruption in DB2 for Linux, UNIX and Windows
- CVE-2020-5024 Denial of service in DB2 for Linux, UNIX and Windows
- CVE-2020-5023 Denial of service in Spectrum Protect Plus
- CVE-2020-5022 Missing authorization in Spectrum Protect Plus
- CVE-2020-5021 Auth bypass in Spectrum Protect Plus
- CVE-2020-5020 Other in Spectrum Protect Plus
- CVE-2020-5019 Other in Spectrum Protect Plus
- CVE-2020-5018 Information disclosure in Spectrum Protect Plus
- CVE-2020-5017 Information disclosure in Spectrum Protect Plus
- CVE-2020-5016 Path traversal in WebSphere Application Server
- CVE-2020-5015 Denial of service in Elastic Storage Server
- CVE-2020-5014 Server-side request forgery in DataPower Gateway
- CVE-2020-5013 XML external entity in QRadar SIEM
- CVE-2020-5008 Information disclosure in DataPower Gateway
- CVE-2020-5004 Cross-site scripting in Engineering Lifecycle Optimization
- CVE-2020-5003 XML external entity in Financial Transaction Manager
- CVE-2020-5002 IBM Financial Transaction Manager security bypass
- CVE-2020-5001 IBM Financial Transaction Manager path traversal
- CVE-2020-5000 Cross-site scripting in Financial Transaction Manager
- CVE-2020-4997 Cross-site scripting in InfoSphere Information Server
- CVE-2020-4996 Information disclosure in Security Identity Governance and Intelligence
- CVE-2020-4995 Auth bypass in Security Identity Governance and Intelligence
- CVE-2020-4994 Denial of service in DataPower Gateway
- CVE-2020-4993 Path traversal in QRadar SIEM
- CVE-2020-4992 Cross-site request forgery in DataPower Gateway
- CVE-2020-4990 SQL injection in Security Guardium
- CVE-2020-4989 Information disclosure in Engineering Workflow Management
- CVE-2020-4988 Cross-site scripting in Loopback
- CVE-2020-4987 Cross-site scripting in FlashSystem 900