Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 74 of 215.
- CVE-2020-36607 FeehiCMS Cross Site Scripting vulnerability
- CVE-2020-36605 Misconfiguration in Hitachi Infrastructure Analytics Advisor
- CVE-2020-36604 hoek subject to prototype pollution via the clone function.
- CVE-2020-36603 Privilege escalation in hoyoverse:mhyprot2
- CVE-2020-36602 Memory corruption in 576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOTA-CM-H-Shark-BD;586-HOTA-CM-H-Shark-BD;588-HOTA-CM-H-Shark-BD;606-HOTA-CM-H-Shark-BD;BI-ACC-REPORT;CM-H-Shark-BD
- CVE-2020-36601 Memory corruption in EMUI
- CVE-2020-36600 Memory corruption in EMUI
- CVE-2020-3660 Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2020-36599 OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value
- CVE-2020-3658 Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2020-3657 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CVE-2020-36569 Authentication bypass in github.com/nanobox-io/golang-nanoauth
- CVE-2020-36568 Resource exhaustion in github.com/revel/revel
- CVE-2020-36567 Arbitrary log line injection in github.com/gin-gonic/gin
- CVE-2020-36566 Path traversal in github.com/whyrusleeping/tar-utils
- CVE-2020-36565 Directory traversal on Windows in github.com/labstack/echo/v4
- CVE-2020-36564 Improper input validation in github.com/justinas/nosurf
- CVE-2020-36563 Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml
- CVE-2020-36562 Uncontrolled Resource Consumption in github.com/shiyanhui/dht
- CVE-2020-36561 Path traversal in github.com/yi-ge/unzip
- CVE-2020-36560 Path traversal in github.com/artdarek/go-unzip
- CVE-2020-3656 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2020-36559 Path Traversal in aahframe.work
- CVE-2020-36558 Race condition in linux:linux kernel
- CVE-2020-36557 Use after free in linux:linux kernel
- CVE-2020-36553 Cross-site scripting in multi restaurant table reservation system project:multi restaurant table reservation system
- CVE-2020-36552 Cross-site scripting in multi restaurant table reservation system project:multi restaurant table reservation system
- CVE-2020-36551 Cross-site scripting in multi restaurant table reservation system project:multi restaurant table reservation system
- CVE-2020-36550 Cross-site scripting in multi restaurant table reservation system project:multi restaurant table reservation system
- CVE-2020-36549 GE Voluson S8 Windows Operating System Patches privileges management
- CVE-2020-36548 GE Voluson S8 Service Browser users.cgi improper authentication
- CVE-2020-36547 GE Voluson S8 Service Browser hard-coded credentials
- CVE-2020-36544 SialWeb CMS Search cross site scriting
- CVE-2020-36543 SialWeb CMS about.php sql injection
- CVE-2020-36542 Demokratian install3.php privileges management
- CVE-2020-36541 Demokratian genera_select.php sql injection
- CVE-2020-36540 Neetai Tech product.php sql injection
- CVE-2020-3654 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
- CVE-2020-36539 Lógico y Creativo sql injection
- CVE-2020-36538 Eatan CMS sql injection
- CVE-2020-36537 Everywhere CMS sql injection
- CVE-2020-36536 Brandbugle main.php sql injection
- CVE-2020-36535 MINMAX newsDia.php sql injection
- CVE-2020-36534 easyii CMS out cross-site request forgery
- CVE-2020-36533 Klapp App JSON Web Token improper authentication
- CVE-2020-36532 Klapp App Authorization Credentials information disclosure
- CVE-2020-36531 SevOne Network Management System Device Manager Page injection
- CVE-2020-36530 SevOne Network Management System Alert Summary sql injection
- CVE-2020-3653 Memory corruption in Snapdragon Compute, Snapdragon Connectivity
- CVE-2020-36529 SevOne Network Management System Traceroute traceroute.php command injection
- CVE-2020-36528 Platinum Mobile MobileHandler.ashx access control
- CVE-2020-36527 Server Status HTTP Status/SMTP Status cross site scripting
- CVE-2020-36526 Countdown Timer Macro cross site scripting
- CVE-2020-36525 Linking New Windows Macro cross site scripting
- CVE-2020-36524 Refined Toolkit UI-Image/UI-Button cross site scripting
- CVE-2020-36523 PlantUML Database Information Macro cross site scripting
- CVE-2020-36521 Memory corruption in iCloud for Windows
- CVE-2020-3652 Memory corruption in Snapdragon Compute, Snapdragon Connectivity
- CVE-2020-36519 Business logic in mimecast:email security
- CVE-2020-36518 Deeply nested json in jackson-databind
- CVE-2020-36517 Information disclosure in home-assistant:home-assistant
- CVE-2020-36516 Weak cryptography in linux:linux kernel
- CVE-2020-36514 Use of Uninitialized Resource in acc_reader.
- CVE-2020-36513 Use of Uninitialized Resource in acc_reader.
- CVE-2020-36512 InputStream::read_exact : `Read` on uninitialized buffer causes UB
- CVE-2020-36511 `read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)
- CVE-2020-36510 15Zine < 3.3.0 - Reflected Cross-Site Scripting
- CVE-2020-3651 Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2020-36505 Delete All Comments Easily <= 1.3 - All Comments Deletion via CSRF
- CVE-2020-36504 WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via CSRF
- CVE-2020-36503 Connections Business Directory < 9.7 - Admin+ CSV Injection
- CVE-2020-36502 Cross-site scripting in swiftfiletransfer:swift file transfer
- CVE-2020-36501 Cross-site scripting in sugarcrm:sugarcrm
- CVE-2020-36499 Cross-site scripting in taotesting:tao assessment platform
- CVE-2020-36498 Cross-site scripting in macrob7 macs framework content management system project:macrob7 macs framework content management system
- CVE-2020-36497 Cross-site scripting in dedecms:dedecms
- CVE-2020-36496 Cross-site scripting in dedecms:dedecms
- CVE-2020-36495 Cross-site scripting in dedecms:dedecms
- CVE-2020-36494 Cross-site scripting in dedecms:dedecms
- CVE-2020-36493 Cross-site scripting in dedecms:dedecms
- CVE-2020-36492 Cross-site scripting in dedecms:dedecms
- CVE-2020-36491 Cross-site scripting in dedecms:dedecms
- CVE-2020-36490 Cross-site scripting in dedecms:dedecms
- CVE-2020-36489 Cross-site scripting in dropouts:air share
- CVE-2020-36488 Path traversal in sky file project:sky file
- CVE-2020-36486 Cross-site scripting in swiftfiletransfer:swift file transfer
- CVE-2020-36485 File upload in madeportable:playable
- CVE-2020-3648 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2020-36478 Security feature bypass in arm:mbed tls
- CVE-2020-36477 Security feature bypass in arm:mbed tls
- CVE-2020-36476 Information disclosure in arm:mbed tls
- CVE-2020-36475 Denial of service in arm:mbed tls
- CVE-2020-36474 SafeCurl before 0.9.2 has a DNS rebinding vulnerability.
- CVE-2020-36473 Information disclosure in ucweb:ucweb uc
- CVE-2020-36472 Data races in max7301
- CVE-2020-36471 Data races in generator
- CVE-2020-36470 Data race in disrustor
- CVE-2020-3647 Memory corruption in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
- CVE-2020-36469 Data races in appendix
- CVE-2020-36468 Non-atomic writes in cgc