Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 71 of 215.
- CVE-2020-36941 Knockpy 4.1.1 - CSV Injection
- CVE-2020-36940 Easy CD & DVD Cover Creator 4.13 - Denial of Service
- CVE-2020-3694 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music
- CVE-2020-36939 Cassandra Web 0.5.0 - Remote File Read
- CVE-2020-36938 WinAVR Version 20100110 - Insecure Folder Permissions
- CVE-2020-36937 MEMU PLAY 3.7.0 - 'MEmusvc' Unquoted Service Path
- CVE-2020-36936 Magic Mouse 2 utilities 2.20 - 'magicmouse2service' Unquoted Service Path
- CVE-2020-36935 KMSpico 17.1.0.0 - 'Service KMSELDI' Unquoted Service Path
- CVE-2020-36934 Deep Instinct Windows Agent 1.2.24.0 - 'DeepNetworkService' Unquoted Service Path
- CVE-2020-36933 IPTInstaller 4.0.9 - 'PassThru Service' Unquoted Service Path
- CVE-2020-36932 Seacms 11.1 - 'checkuser' Stored XSS
- CVE-2020-36931 Click2Magic 1.1.5 - Stored Cross-Site Scripting
- CVE-2020-36930 SysGauge 7.9.18 - ' SysGauge Server' Unquoted Service Path
- CVE-2020-3693 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2020-36929 Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Path
- CVE-2020-36928 Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path
- CVE-2020-36927 DiskPulse 13.6.14 - Unquoted Service Path
- CVE-2020-36926 SmarterTools SmarterTrack 7922 -Information Disclosure
- CVE-2020-36925 Arteco Web Client DVR/NVR Session ID Brute Force Authentication Bypass
- CVE-2020-36924 Sony BRAVIA Digital Signage 1.7.8 Unauthenticated Remote File Inclusion
- CVE-2020-36923 Sony BRAVIA Digital Signage 1.7.8 Client-Side Protection Bypass via IDOR
- CVE-2020-36922 Sony BRAVIA Digital Signage 1.7.8 Unauthenticated System API Information Disclosure
- CVE-2020-36921 RED-V Super Digital Signage System 5.1.1 Log Information Disclosure Vulnerability
- CVE-2020-36920 iDS6 DSSPro Digital Signage System 6.2 Privilege Escalation via Access Control
- CVE-2020-3692 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
- CVE-2020-36919 WPForms 1.7.8 - Cross-Site Scripting (XSS)
- CVE-2020-36918 iDS6 DSSPro Digital Signage System 6.2 Cross-Site Request Forgery via User Management
- CVE-2020-36917 iDS6 DSSPro Digital Signage System 6.2 Cleartext Password Disclosure via Cookie
- CVE-2020-36916 TDM Digital Signage PC Player 4.1.0.4 Privilege Escalation via Insecure Permissions
- CVE-2020-36915 Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials
- CVE-2020-36914 QiHang Media Web Digital Signage 3.0.9 Cookie Authentication Credentials Disclosure
- CVE-2020-36913 All-Dynamics Software enlogic:show 2.0.2 Session Fixation Authentication Bypass
- CVE-2020-36912 Plexus anblick Digital Signage Management 3.1.13 Open Redirect via Pagina Parameter
- CVE-2020-36911 Covenant 0.5 - Remote Code Execution (RCE)
- CVE-2020-36910 Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter
- CVE-2020-3691 Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CVE-2020-36909 Secure Computing SnapGear Management Console SG560 3.1.5 Arbitrary File Read/Write
- CVE-2020-36908 Secure Computing SnapGear Management Console SG560 3.1.5 Cross-Site Request Forgery via Admin Users
- CVE-2020-36907 Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service
- CVE-2020-36906 P5 FNIP-8x16A FNIP-4xSH 1.0.20 Cross-Site Request Forgery via User Management
- CVE-2020-36905 FIBARO System Home Center 5.021 Remote File Inclusion via Proxy API
- CVE-2020-36904 Selea CarPlateServer 4.0.1.6 Remote Program Execution via Configuration Endpoint
- CVE-2020-36903 Selea CarPlateServer 4.0.1.6 Local Privilege Escalation via Unquoted Service Path
- CVE-2020-36902 UBICOD Medivision Digital Signage 1.5.1 Authorization Bypass via User Privileges
- CVE-2020-36901 UBICOD Medivision Digital Signage 1.5.1 Cross-Site Request Forgery via User Management
- CVE-2020-36900 All-Dynamics Digital Signage System 2.0.2 Cross-Site Request Forgery via User Management
- CVE-2020-3690 Misconfiguration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
- CVE-2020-36899 QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosure
- CVE-2020-36898 QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Deletion
- CVE-2020-36897 QiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code Execution
- CVE-2020-36896 QiHang Media Web Digital Signage 3.0.9 Cleartext Credentials Disclosure
- CVE-2020-36895 EIBIZ i-Media Server Digital Signage 3.8.0 Unauthenticated Configuration Disclosure
- CVE-2020-36894 Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated User Creation Vulnerability
- CVE-2020-36893 Eibiz i-Media Server Digital Signage 3.8.0 Directory Traversal Vulnerability
- CVE-2020-36892 Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated Privilege Escalation
- CVE-2020-36891 Kentico Xperience <= 12.0.49 File Upload Stored XSS
- CVE-2020-36890 Kentico Xperience <= 10 Administrator Access Control Bypass
- CVE-2020-36889 Kentico Xperience <= 12.0.90 Administration Interface Stored XSS
- CVE-2020-36888 SpinetiX Fusion Digital Signage 3.4.8 Username Enumeration via Login Script
- CVE-2020-36887 SpinetiX Fusion Digital Signage 3.4.8 Unauthenticated Database Backup Disclosure
- CVE-2020-36886 SpinetiX Fusion Digital Signage 3.4.8 Cross-Site Request Forgery via User Creation
- CVE-2020-36885 Sony IPELA Network Camera 1.82.01 Remote Stack Buffer Overflow via ftpclient.cgi
- CVE-2020-36884 BrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated SSRF
- CVE-2020-36883 SpinetiX Fusion Digital Signage 3.4.8 Authenticated Path Traversal via File Operations
- CVE-2020-36882 Flexsense DiskBoss Application Crash Denial of Service
- CVE-2020-36881 Flexsense DiskBoss 'Add Input Directory' Buffer Overflow
- CVE-2020-36880 Flexsense DiskBoss 'Reports and Data Directory' Buffer Overflow
- CVE-2020-3688 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2020-36879 Flexsense DiskBoss Service Unquoted Service Path Vulnerability
- CVE-2020-36878 ReQuest Serious Play F3 Media Player <= 3.0.0 Directory Traversal File Disclosure
- CVE-2020-36877 ReQuest Serious Play F3 Media Server <= 7.0.3 code execution
- CVE-2020-36876 ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020
- CVE-2020-36875 AccessAlly < 3.3.2 Unauthenticated Arbitrary PHP Code Execution
- CVE-2020-36874 ACE SECURITY WIP-90113 Unauthenticated Configuration Disclosure
- CVE-2020-36873 Astak CM-818T3 Unauthenticated Configuration Disclosure
- CVE-2020-36872 BACnet Test Server 1.01 Malformed BVLC Length DoS
- CVE-2020-36871 ESCAM QD-900 Unauthenticated Configuration Disclosure
- CVE-2020-36870 Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE
- CVE-2020-3687 Information disclosure in unspecified
- CVE-2020-36869 Nagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit Page
- CVE-2020-36868 Nagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh Script
- CVE-2020-36867 Nagios XI < 5.7.3 Command Injection in Report PDF Download
- CVE-2020-36866 Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface
- CVE-2020-36865 Nagios XI < 5.7.2 XSS via BPI Config Management
- CVE-2020-36864 Nagios XI < 5.7.2 XSS via Dashboard Background Color Setting
- CVE-2020-36863 Nagios XI < 5.7.2 Unrestricted File Upload via Audio Import Directory
- CVE-2020-36862 Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts
- CVE-2020-36861 Nagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period Pages
- CVE-2020-36860 Nagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit Pages
- CVE-2020-3686 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CVE-2020-36859 Nagios XI < 5.7.4 Core Config Manager (CCM) SQL Injection via Object Edit Pages
- CVE-2020-36858 Nagios Log Server < 2.1.6 XSS via Create User, Edit User, & Manage Host Lists Pages
- CVE-2020-36857 Nagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface Page
- CVE-2020-36856 Nagios XI < 5.6.14 Authenticated RCE command_test.php via address
- CVE-2020-36855 DCMTK dcmqrscp parseQuota stack-based overflow
- CVE-2020-36854 Async JavaScript <= 2.19.07.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- CVE-2020-36853 10WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change
- CVE-2020-36852 Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Database Wiping
- CVE-2020-36851 Rob--W cors-anywhere Misconfigured CORS Proxy Allows SSRF
- CVE-2020-36850 Sitecore JSS React Sample Application 11.0.0 - 14.0.1 Information Disclosure