Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 84 of 215.
- CVE-2020-35252 Cross-site scripting in egavilanmedia:user registration and login system with admin panel
- CVE-2020-3525 Cisco Identity Services Engine Password Disclosure to an Unauthorized Actor Vulnerability
- CVE-2020-35249 Cross-site scripting in elkarbackup:elkarbackup
- CVE-2020-35245 SQL injection in flamingo project:flamingo
- CVE-2020-35244 SQL injection in flamingo project:flamingo
- CVE-2020-35243 SQL injection in flamingo project:flamingo
- CVE-2020-35242 SQL injection in flamingo project:flamingo
- CVE-2020-35241 Cross-site scripting in flatpress:flatpress
- CVE-2020-35240 Cross-site scripting in fluxbb:fluxbb
- CVE-2020-3524 Cisco IOS XE ROM Monitor Software Vulnerability
- CVE-2020-35239 CakePHP allows method override parameters to bypass CSRF checks
- CVE-2020-35236 Missing authorization in amazee:lagoon
- CVE-2020-35235 Missing authorization in themexa:secure file manager
- CVE-2020-35234 Information disclosure in wp-ecommerce:easy wp smtp
- CVE-2020-35233 Denial of service in netgear:gs116e firmware
- CVE-2020-35231 Auth bypass in netgear:gs116e firmware
- CVE-2020-35230 Integer overflow in netgear:gs116e firmware
- CVE-2020-3523 Cisco Data Center Network Manager Cross-Site Scripting Vulnerability
- CVE-2020-35229 Auth bypass in netgear:gs116e firmware
- CVE-2020-35228 Cross-site scripting in netgear:gs116e firmware
- CVE-2020-35227 Memory corruption in netgear:gs116e firmware
- CVE-2020-35226 Missing authorization in netgear:gs116e firmware
- CVE-2020-35225 Memory corruption in netgear:gs116e firmware
- CVE-2020-35224 Memory corruption in netgear:gs116e firmware
- CVE-2020-35223 Cross-site request forgery in netgear:gs116e firmware
- CVE-2020-35221 Weak cryptography in netgear:gs116e firmware
- CVE-2020-3522 Cisco Data Center Network Manager Authorization Bypass Vulnerability
- CVE-2020-35219 Auth bypass in asus:dsl-n17u firmware
- CVE-2020-35217 Cross-Site Request Forgery in Vert.x-Web framework
- CVE-2020-35216 An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.
- CVE-2020-35215 Malicious Atomix node queries expose sensitive information
- CVE-2020-35214 An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.
- CVE-2020-35213 An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.
- CVE-2020-35211 An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.
- CVE-2020-35210 A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.
- CVE-2020-3521 Cisco Data Center Network Manager Read File Path Traversal Vulnerability
- CVE-2020-35209 An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.
- CVE-2020-35208 Auth bypass in logmein:lastpass
- CVE-2020-35207 Auth bypass in logmein:lastpass
- CVE-2020-35206 Cross-site scripting in quest:policy authority for unified communications
- CVE-2020-35205 Server-side request forgery in quest:policy authority for unified communications
- CVE-2020-35204 Cross-site scripting in quest:policy authority for unified communications
- CVE-2020-35203 Cross-site scripting in quest:policy authority for unified communications
- CVE-2020-35202 Cross-site scripting in igniterealtime:openfire
- CVE-2020-35201 Cross-site scripting in igniterealtime:openfire
- CVE-2020-35200 Cross-site scripting in igniterealtime:openfire
- CVE-2020-3520 Cisco Data Center Network Manager Information Disclosure Vulnerability
- CVE-2020-35199 Cross-site scripting in igniterealtime:openfire
- CVE-2020-35198 Integer overflow in oracle:communications eagle
- CVE-2020-35197 Hardcoded credentials in docker:memcached docker image
- CVE-2020-35196 Hardcoded credentials in docker:rabbitmq docker image
- CVE-2020-35195 Hardcoded credentials in docker:haproxy docker image
- CVE-2020-35193 Hardcoded credentials in sonarsource:sonarqube docker image
- CVE-2020-35192 Hardcoded credentials in hashicorp:vault
- CVE-2020-35191 Hardcoded credentials in drupal:drupal docker images
- CVE-2020-35190 Hardcoded credentials in plone:plone
- CVE-2020-3519 Cisco Data Center Network Manager Path Traversal Vulnerability
- CVE-2020-35189 Hardcoded credentials in kong:kong alpine docker image
- CVE-2020-35187 Hardcoded credentials in influxdata:telegraf
- CVE-2020-35186 Hardcoded credentials in docker:adminer
- CVE-2020-35185 Hardcoded credentials in docker:ghost alpine docker image
- CVE-2020-35184 Hardcoded credentials in docker:composer docker image
- CVE-2020-3518 Cisco Data Center Network Manager Cross-Site Scripting Vulnerability
- CVE-2020-35177 Enumeration of users in HashiCorp Vault
- CVE-2020-35176 Path traversal in awstats:awstats
- CVE-2020-35175 Security feature bypass in frappe:frappe
- CVE-2020-35173 Missing authorization in amaze file manager project:amaze file manager
- CVE-2020-35170 Cross-site scripting in Unisphere for PowerMax
- CVE-2020-3517 Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability
- CVE-2020-35169 Other in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-35168 Weak cryptography in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-35167 Weak cryptography in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-35166 Weak cryptography in BSAFE Crypto-C Micro Edition
- CVE-2020-35165 Weak cryptography in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-35164 Weak cryptography in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-35163 Weak cryptography in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-3516 Cisco IOS XE Software Web UI Improper Input Validation Vulnerability
- CVE-2020-35152 Privilege escalation through unquoted service binary path on Cloudflare WARP for Windows
- CVE-2020-35151 SQL injection in phpgurukul:online marriage registration system
- CVE-2020-3515 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities
- CVE-2020-35149 Code Injection in mquery
- CVE-2020-35145 Privilege escalation in acronis:true image
- CVE-2020-35141 FaucetSDN Ryu Denial of Service Vulnerability
- CVE-2020-3514 Cisco Firepower Threat Defense Software Multi-Instance Container Escape Vulnerability
- CVE-2020-35139 FaucetSDN Ryu Denial of Service Vulnerability
- CVE-2020-35138 Hardcoded credentials in mobileiron:mobile\@work
- CVE-2020-35137 Hardcoded credentials in mobileiron:mobile\@work
- CVE-2020-35136 Dolibarr authenticated Remote Code Execution
- CVE-2020-35135 Cross-site request forgery in infolific:ultimate category excluder
- CVE-2020-35133 Memory corruption in irfanview:irfanview
- CVE-2020-35132 Cross-site scripting in fedoraproject:fedora
- CVE-2020-35131 Code injection in agentejo:cockpit
- CVE-2020-3513 Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities
- CVE-2020-35129 Mautic stored Cross-site Scripting (XSS)
- CVE-2020-35128 Mautic stored Cross-site Scripting (XSS)
- CVE-2020-35127 Cross-site scripting in igniterealtime:openfire
- CVE-2020-35126 Cross-site scripting in typesettercms:typesetter
- CVE-2020-35125 Mautic is vulnerable to XSS vulnerability
- CVE-2020-35124 XSS vulnerability leveraged through referrers could allow un-authorized admin access in Mautic
- CVE-2020-35123 XML external entity in zimbra:collaboration