Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 64 of 215.
- CVE-2020-4159 Information disclosure in QRadar Network Security
- CVE-2020-4157 Hardcoded credentials in QRadar Network Security
- CVE-2020-4153 Cross-site scripting in QRadar Network Security
- CVE-2020-4152 Information disclosure in QRadar Network Security
- CVE-2020-4151 Other in QRadar SIEM
- CVE-2020-4150 Hardcoded credentials in Security SiteProtector System
- CVE-2020-4146 Misconfiguration in Security SiteProtector System
- CVE-2020-4140 Cross-site scripting in Security SiteProtector System
- CVE-2020-4138 Information disclosure in Security SiteProtector System
- CVE-2020-4135 Denial of service in DB2 for Linux- UNIX and Windows
- CVE-2020-4129 Security feature bypass in HCL Domino
- CVE-2020-4128 Security feature bypass in HCL Domino
- CVE-2020-4127 Cross-site request forgery in HCL Domino
- CVE-2020-4126 Information disclosure in HCL iNotes
- CVE-2020-4125 Information disclosure in "HCL Marketing Operations"
- CVE-2020-4107 HCL Domino is affected by an Insufficient Access Control vulnerability
- CVE-2020-4104 Cross-site scripting in HCL BigFix WebUI
- CVE-2020-4102 Memory corruption in HCL Notes
- CVE-2020-4101 Server-side request forgery in "HCL Digital Experience"
- CVE-2020-4100 Code injection in "HCL Verse for Android"
- CVE-2020-4099 HCL Verse for Android is susceptible to an APK signing key check vulnerability
- CVE-2020-4097 Memory corruption in HCL Notes
- CVE-2020-4095 Information disclosure in "HCL BigFix Platform"
- CVE-2020-4092 Information disclosure in "HCL Nomad"
- CVE-2020-4089 Information disclosure in HCL Notes
- CVE-2020-4085 Information disclosure in "HCL Connections"
- CVE-2020-4084 Cross-site scripting in HCL Connections
- CVE-2020-4083 Information disclosure in "HCL Connections"
- CVE-2020-4082 Cross-site scripting in "HCL Connections"
- CVE-2020-4081 Cross-site scripting in HCL Digital Experience
- CVE-2020-4080 Cross-site scripting in HCL Verse
- CVE-2020-4079 Information disclosure vulnerability in iTop
- CVE-2020-4077 Context isolation bypass via contextBridge in Electron
- CVE-2020-4076 Context isolation bypass via leaked cross-context objects in Electron
- CVE-2020-4075 Arbitrary file read via window-open IPC in Electron
- CVE-2020-4074 Improper Authentication
- CVE-2020-4072 Log Forging in generator-jhipster-kotlin
- CVE-2020-4071 Timing attack on django-basic-auth-ip-whitelist
- CVE-2020-4070 Cross-site Scripting in CSS Validator
- CVE-2020-4068 Heap-based Buffer Overflow in APNSwift
- CVE-2020-4067 Improper Initialization in coturn
- CVE-2020-4066 Command Injection in Limdu trainBatch function
- CVE-2020-4062 Improper Access Control in Conjur OSS Helm Chart
- CVE-2020-4061 Cross-site Scripting in OctoberPotential self-XSS when pasting content from malicious websites
- CVE-2020-4060 Use After Free in in cups_update_info in LoRa Basics Station
- CVE-2020-4059 Command Injection in mversion
- CVE-2020-4054 Cross-site Scripting in Sanitize
- CVE-2020-4053 Path Traversal in Helm Plugin Archive
- CVE-2020-4052 Stored XSS through template injection in Wiki.js
- CVE-2020-4051 XSS in Dijit Editor's LinkDialog plugin
- CVE-2020-4050 set-screen-option filter misuse by plugins leading to privilege escalation in WordPress
- CVE-2020-4049 Authenticated self-XSS via theme uploads in WordPress
- CVE-2020-4048 Open redirect in wp_validate_redirect() in WordPress
- CVE-2020-4047 Authenticated XSS via media attachment page in WordPress
- CVE-2020-4046 Authenticated XSS through embed block in WordPress
- CVE-2020-4045 Information disclosure in SSB-DB
- CVE-2020-4044 Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it
- CVE-2020-4043 Phar unserialization vulnerability in phpMussel
- CVE-2020-4042 Authentication bypass in Bareos
- CVE-2020-4041 The filename of uploaded files vulnerable to stored XSS in Bolt CMS
- CVE-2020-4040 CSRF issue on preview pages in Bolt CMS
- CVE-2020-4039 Directory Traversal Vulnerability in SUSI.AI Server
- CVE-2020-4038 Reflected XSS in GraphQL Playground
- CVE-2020-4037 Open Redirect in OAuth2 Proxy
- CVE-2020-4035 DoS or local data modification via malicious record IDs in WatermelonDB
- CVE-2020-4033 OOB Read in RLEDECOMPRESS in FreeRDP
- CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order` in FreeRDP
- CVE-2020-4031 Use-After-Free in gdi_SelectObject in FreeRDP
- CVE-2020-4030 OOB read in `TrioParse` in FreeRDP
- CVE-2020-4029 Missing authorization in Jira Server and Data Center
- CVE-2020-4028 Information disclosure in Jira Server and Data Center
- CVE-2020-4027 Code injection in Confluence Data Center
- CVE-2020-4026 Missing authorization in Crucible
- CVE-2020-4025 Cross-site scripting in Jira Server and Data Center
- CVE-2020-4024 Cross-site scripting in Jira Server and Data Center
- CVE-2020-4023 Cross-site scripting in Crucible
- CVE-2020-4022 Cross-site scripting in Jira Server and Data Center
- CVE-2020-4021 Cross-site scripting in Jira Server and Data Center
- CVE-2020-4020 Security feature bypass in Companion App
- CVE-2020-4019 Other in Companion App
- CVE-2020-4018 Cross-site request forgery in Crucible
- CVE-2020-4017 Information disclosure in Crucible
- CVE-2020-4016 Information disclosure in Crucible
- CVE-2020-4015 Information disclosure in Crucible
- CVE-2020-4014 Missing authorization in Crucible
- CVE-2020-4013 Cross-site scripting in Crucible
- CVE-2020-4008 Other in VMware Carbon Black Cloud macOS Sensor
- CVE-2020-4006 Multiple VMware Products Command Injection
- CVE-2020-4005 Privilege escalation in VMware ESXi
- CVE-2020-4004 Use after free in Fusion
- CVE-2020-4003 SQL injection in VMware SD-WAN Orchestrator
- CVE-2020-4002 Code injection in VMware SD-WAN Orchestrator
- CVE-2020-4001 Hardcoded credentials in VMware SD-WAN Orchestrator
- CVE-2020-4000 Path traversal in VMware SD-WAN Orchestrator
- CVE-2020-3999 Denial of service in VMware ESXi, VMware Workstation,VMware Fusion and VMware Cloud Foundation
- CVE-2020-3998 Information disclosure in VMware Horizon Client for Windows
- CVE-2020-3997 Cross-site scripting in VMware Horizon Server
- CVE-2020-3996 Information disclosure in Velero
- CVE-2020-3995 Denial of service in VMware ESXi, Workstation, Fusion
- CVE-2020-3994 Security feature bypass in vCenter Server