Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 81 of 215.
- CVE-2020-35719 Cross-site scripting in quest:policy authority for unified communications
- CVE-2020-35717 Cross-site scripting in electronjs:zonote
- CVE-2020-35716 Denial of service in linksys:re6500 firmware
- CVE-2020-35715 Command injection in linksys:re6500 firmware
- CVE-2020-35714 Command injection in linksys:re6500 firmware
- CVE-2020-35713 Command injection in linksys:re6500 firmware
- CVE-2020-35712 Server-side request forgery in esri:arcgis server
- CVE-2020-35711 Dangling reference in `access::Map` with Constant
- CVE-2020-35710 Information disclosure in parallels:remote application server
- CVE-2020-3571 Cisco Firepower 4110 ICMP Flood Denial of Service Vulnerability
- CVE-2020-35709 Path traversal in bloofox:bloofoxcms
- CVE-2020-35708 SQL injection in phplist:phplist
- CVE-2020-35707 Cross-site scripting in daybydaycrm:daybyday
- CVE-2020-35706 Cross-site scripting in daybydaycrm:daybyday
- CVE-2020-35705 Cross-site scripting in daybydaycrm:daybyday
- CVE-2020-35704 Cross-site scripting in daybydaycrm:daybyday
- CVE-2020-35702 Memory corruption in freedesktop:poppler
- CVE-2020-35701 SQL injection in cacti:cacti
- CVE-2020-35700 SQL Injection in librenms
- CVE-2020-35698 Cross-site scripting in thinkific:thinkific
- CVE-2020-35693 Information disclosure in google:android
- CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion
- CVE-2020-35687 Cross-site request forgery in php-fusion:phpfusion
- CVE-2020-35686 Privilege escalation in soundresearch:dchu model software component modules
- CVE-2020-35685 Weak cryptography in hcc-embedded:nichestack
- CVE-2020-35684 Memory corruption in hcc-embedded:nichestack
- CVE-2020-35683 Memory corruption in hcc-embedded:nichestack
- CVE-2020-35682 Auth bypass in zohocorp:manageengine servicedesk plus
- CVE-2020-35681 Django Channels leakage of session identifiers using legacy AsgiHandler
- CVE-2020-35680 Null dereference in fedoraproject:fedora
- CVE-2020-3568 Cisco Email Security Appliance URL Filtering Bypass Vulnerability
- CVE-2020-35679 Denial of service in fedoraproject:fedora
- CVE-2020-35678 Open Redirect in autobahn
- CVE-2020-35677 Cross-site scripting in bigprof:online invoicing system
- CVE-2020-35676 Cross-site scripting in bigprof:online invoicing system
- CVE-2020-35675 Cross-site request forgery in bigprof:online invoicing system
- CVE-2020-35674 SQL injection in bigprof:online invoicing system
- CVE-2020-3567 Cisco Industrial Network Director Denial of Service Vulnerability
- CVE-2020-35669 http before 0.13.3 vulnerable to header injection
- CVE-2020-35668 Null dereference in redislabs:redisgraph
- CVE-2020-35667 Server-side request forgery in jetbrains:teamcity
- CVE-2020-35666 SQL injection in steedos:steedos
- CVE-2020-35665 Command injection in terra-master:terramaster operating system
- CVE-2020-35664 Cross-site scripting in acronis:cyber protect
- CVE-2020-35662 SaltStack Salt Improper SSL Certificate Validation
- CVE-2020-35660 Cross-site scripting in monicahq:monica
- CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion
- CVE-2020-35659 Cross-site scripting in pi-hole:pi-hole
- CVE-2020-35658 Weak cryptography in titanhq:spamtitan
- CVE-2020-35657 File upload in jaws project:jaws
- CVE-2020-35656 File upload in jaws project:jaws
- CVE-2020-35655 Pillow Out-of-bounds Read
- CVE-2020-35654 Pillow Out-of-bounds Write
- CVE-2020-35653 Pillow Out-of-bounds Read
- CVE-2020-35652 Denial of service in digium:asterisk
- CVE-2020-35650 Cross-site scripting in uncannyowl:uncanny groups for learndash
- CVE-2020-3565 Cisco Firepower Threat Defense Software TCP Intercept Bypass Vulnerability
- CVE-2020-3564 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability
- CVE-2020-35636 Memory corruption in CGAL Project
- CVE-2020-35635 Memory corruption in CGAL Project
- CVE-2020-35634 Memory corruption in CGAL Project
- CVE-2020-35633 Memory corruption in CGAL Project
- CVE-2020-35632 Memory corruption in libcgal
- CVE-2020-35631 Memory corruption in libcgal
- CVE-2020-35630 Memory corruption in libcgal
- CVE-2020-3563 Cisco Firepower Threat Defense Software TCP Flood Denial of Service Vulnerability
- CVE-2020-35629 Memory corruption in libcgal
- CVE-2020-35628 Memory corruption in CGAL
- CVE-2020-35627 File upload in woocommerce:gift cards
- CVE-2020-35626 Cross-site request forgery in mediawiki:mediawiki
- CVE-2020-35625 Missing authorization in mediawiki:mediawiki
- CVE-2020-35624 Information disclosure in mediawiki:mediawiki
- CVE-2020-35623 Auth bypass in mediawiki:mediawiki
- CVE-2020-35622 Cross-site scripting in mediawiki:mediawiki
- CVE-2020-3562 Cisco Firepower 2100 Series SSL/TLS Inspection Denial of Service Vulnerability
- CVE-2020-35616 [20201107] - Core - Write ACL violation in multiple core views
- CVE-2020-35615 [20201106] - Core - CSRF in com_privacy emailexport feature
- CVE-2020-35614 [20201105] - Core - User Enumeration in backend login
- CVE-2020-35613 [20201104] - Core - SQL injection in com_users list view
- CVE-2020-35612 [20201103] - Core - Path traversal in mod_random_image
- CVE-2020-35611 [20201102] - Core - Disclosure of secrets in Global Configuration page
- CVE-2020-35610 [20201101] - Core - com_finder ignores access levels on autosuggest
- CVE-2020-3561 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection Vulnerability
- CVE-2020-35609 Denial of service in microsoft:azure sphere
- CVE-2020-35608 Code injection in microsoft:azure sphere
- CVE-2020-35606 Command injection in webmin:webmin
- CVE-2020-35605 Command injection in debian:debian linux
- CVE-2020-35604 XML external entity in kronos:web time and attendance
- CVE-2020-3560 Cisco Aironet Access Points UDP Flooding Denial of Service Vulnerability
- CVE-2020-35598 Path traversal in advanced comment system project:advanced comment system
- CVE-2020-35597 SQL injection in victor cms project:victor cms
- CVE-2020-35594 Cross-site scripting in zohocorp:manageengine admanager plus
- CVE-2020-35593 Privilege escalation in bmc:patrol agent
- CVE-2020-35592 Cross-site scripting in pi-hole:pi-hole
- CVE-2020-35591 Auth bypass in pi-hole:pi-hole
- CVE-2020-35590 Security feature bypass in limitloginattempts:limit login attempts reloaded
- CVE-2020-3559 Cisco Aironet Access Point Authentication Flood Denial of Service Vulnerability
- CVE-2020-35589 Cross-site scripting in limitloginattempts:limit login attempts reloaded
- CVE-2020-35587 Weak cryptography in mersive:solstice firmware
- CVE-2020-35586 Auth bypass in mersive:solstice pod firmware