Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 90 of 215.
- CVE-2020-29550 Information disclosure in urve:urve
- CVE-2020-2955 Other in FLEXCUBE Core Banking
- CVE-2020-29548 Command injection in smartertools:smartermail
- CVE-2020-29547 Command injection in citadel:webcit
- CVE-2020-29540 Server-side request forgery in systransoft:pure neural server
- CVE-2020-2954 Cross-site scripting in PeopleSoft Enterprise HCM Candidate Gateway
- CVE-2020-29539 Cross-site scripting in systransoft:pure neural server
- CVE-2020-29538 Missing authorization in rsa:archer
- CVE-2020-29537 Open redirect in rsa:archer
- CVE-2020-29536 Information disclosure in rsa:archer
- CVE-2020-29535 Cross-site scripting in rsa:archer
- CVE-2020-29534 Other in linux:linux kernel
- CVE-2020-2953 Other in Retail Customer Management and Segmentation Foundation
- CVE-2020-29529 Unsafe tar unpacking in HashiCorp go-slug
- CVE-2020-2952 Other in HTTP Server
- CVE-2020-29511 Other in Go
- CVE-2020-29510 Other in Go
- CVE-2020-2951 Denial of service in VM VirtualBox
- CVE-2020-29509 Authentication Bypass in github.com/russellhaering/gosaml2
- CVE-2020-29508 Weak cryptography in Dell BSAFE Micro Edition Suite
- CVE-2020-29507 Other in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-29506 Weak cryptography in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-29505 Weak cryptography in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-29504 Weak cryptography in BSAFE Crypto-C Micro Edition
- CVE-2020-29503 Misconfiguration in PowerStore
- CVE-2020-29502 Information disclosure in PowerStore
- CVE-2020-29501 Information disclosure in PowerStore
- CVE-2020-29500 Information disclosure in PowerStore
- CVE-2020-2950 Other in Oracle Business Intelligence Enterprise Edition
- CVE-2020-29499 Command injection in PowerStore
- CVE-2020-29498 Open redirect in Wyse Management Suite
- CVE-2020-29497 Cross-site scripting in Wyse Management Suite
- CVE-2020-29496 Cross-site scripting in Wyse Management Suite
- CVE-2020-29495 Command injection in Avamar
- CVE-2020-29494 Path traversal in Avamar
- CVE-2020-29493 SQL injection in Avamar
- CVE-2020-29492 Misconfiguration in Wyse Proprietary OS (ThinOS)
- CVE-2020-29491 Misconfiguration in Wyse Proprietary OS (ThinOS)
- CVE-2020-29490 Denial of service in Unity
- CVE-2020-2949 Information disclosure in Coherence
- CVE-2020-29489 Information disclosure in Unity
- CVE-2020-29487 Denial of service in xen:xapi
- CVE-2020-29486 Denial of service in debian:debian linux
- CVE-2020-29485 Denial of service in debian:debian linux
- CVE-2020-29484 Null dereference in debian:debian linux
- CVE-2020-29483 Use after free in debian:debian linux
- CVE-2020-29482 Path traversal in debian:debian linux
- CVE-2020-29481 Information disclosure in debian:debian linux
- CVE-2020-29480 Missing authorization in debian:debian linux
- CVE-2020-29479 Missing authorization in debian:debian linux
- CVE-2020-29478 Misconfiguration in CA Service Catalog
- CVE-2020-29477 Cross-site scripting in invisioncommunity:community
- CVE-2020-29475 Cross-site scripting in nopcommerce:store
- CVE-2020-29474 SQL injection in egavilanmedia:egm address book
- CVE-2020-29472 SQL injection in egavilanmedia:under construction page with cpanel
- CVE-2020-29471 OpenCart Stored Cross-Site Scripting
- CVE-2020-29470 OpenCart Cross-site Scripting (XSS) in the Subject field of mail.
- CVE-2020-2947 Other in PeopleSoft Enterprise HCM Absence Management
- CVE-2020-29469 Cross-site scripting in wondercms:wondercms
- CVE-2020-2946 Other in APM - Application Performance Management
- CVE-2020-29458 Cross-site request forgery in textpattern:textpattern
- CVE-2020-29457 Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core
- CVE-2020-29456 Cross-site scripting in papermerge
- CVE-2020-29455 Cross-site scripting in smartystreets:liveaddressplugin.js
- CVE-2020-29454 Incorrect permission enforcement in UmbracoCms
- CVE-2020-29453 Path traversal in Jira Data Center
- CVE-2020-29451 Information disclosure in Jira Data Center
- CVE-2020-29450 Denial of service in Confluence Server
- CVE-2020-2945 Other in Financial Services Deposit Insurance Calculations for Liquidity Risk Management
- CVE-2020-29448 Path traversal in Confluence Data Center
- CVE-2020-29447 Denial of service in Crucible
- CVE-2020-29446 Missing authorization in Crucible
- CVE-2020-29445 Server-side request forgery in Confluence Server
- CVE-2020-29444 Cross-site scripting in Confluence Server
- CVE-2020-29443 Memory corruption in debian:debian linux
- CVE-2020-29441 File upload in outsystems:outsystems
- CVE-2020-29440 Security feature bypass in tesla:model x firmware
- CVE-2020-2944 Memory corruption in Solaris Operating System
- CVE-2020-29439 Auth bypass in tesla:model x firmware
- CVE-2020-29438 Security feature bypass in tesla:model x firmware
- CVE-2020-29437 SQL injection in orangehrm:orangehrm
- CVE-2020-29436 XML external entity in sonatype:nexus repository manager
- CVE-2020-2943 Other in Financial Services Liquidity Risk Measurement and Management
- CVE-2020-2942 Other in Financial Services Price Creation and Discovery
- CVE-2020-2941 Other in Financial Services Funds Transfer Pricing
- CVE-2020-2940 Other in Financial Services Profitability Management
- CVE-2020-29396 Privilege escalation in Odoo Community
- CVE-2020-29395 Cross-site scripting in myeventon:eventon
- CVE-2020-29394 Memory corruption in debian:debian linux
- CVE-2020-29392 Hardcoded credentials in lock password manager safe app project:lock password manager safe app
- CVE-2020-29390 Command injection in zeroshell:zeroshell
- CVE-2020-2939 Other in Financial Services Asset Liability Management
- CVE-2020-29389 Hardcoded credentials in docker:crux linux docker image
- CVE-2020-29385 Denial of service in canonical:ubuntu linux
- CVE-2020-29384 Integer overflow in advsys:pngout
- CVE-2020-29383 Hardcoded credentials in vsolcn:v1600d-mini firmware
- CVE-2020-29382 Hardcoded credentials in vsolcn:v1600d firmware
- CVE-2020-29381 Command injection in vsolcn:v1600d-mini firmware
- CVE-2020-29380 Information disclosure in vsolcn:v1600d-mini firmware
- CVE-2020-2938 Other in Financial Services Loan Loss Forecasting and Provisioning