Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 96 of 215.
- CVE-2020-28433 Command Injection
- CVE-2020-2843 Other in iSupport
- CVE-2020-28429 Command Injection
- CVE-2020-28426 Command Injection
- CVE-2020-28425 Command Injection
- CVE-2020-28424 Command Injection
- CVE-2020-28423 Command Injection
- CVE-2020-28422 Command Injection
- CVE-2020-28421 Privilege escalation in CA Unified Infrastructure Management
- CVE-2020-2842 Other in Depot Repair
- CVE-2020-28419 Other in HP LaserJet Printer; HP LaserJet Pro Printer; HP PageWide Printer; HP PageWide Pro Printer; HP inkjet Printer; HP OfficeJet Printer
- CVE-2020-28416 Other in HP OfficeJet Printer; HP PageWide Printer
- CVE-2020-28415 Cross-site scripting in tranzware payment gateway project:tranzware payment gateway
- CVE-2020-28414 Cross-site scripting in tranzware payment gateway project:tranzware payment gateway
- CVE-2020-28413 MantisBT SQL Injection via mc_project_get_users function
- CVE-2020-2841 Other in Knowledge Management
- CVE-2020-28409 Cross-site scripting in dundas:dundas bi
- CVE-2020-28408 Cross-site scripting in dundas:dundas bi
- CVE-2020-28407 Other in swtpm project:swtpm
- CVE-2020-28406 Missing authorization in iris:star practice management
- CVE-2020-28405 Missing authorization in iris:star practice management
- CVE-2020-28404 Missing authorization in iris:star practice management
- CVE-2020-28403 Cross-site request forgery in iris:star
- CVE-2020-28402 Missing authorization in iris:star practice management
- CVE-2020-28401 Missing authorization in iris:star practice management
- CVE-2020-28400 Denial of service in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
- CVE-2020-2840 Other in E-Business Intelligence
- CVE-2020-28398 Cross-site request forgery in RUGGEDCOM ROX MX5000
- CVE-2020-28397 Missing authorization in SIMATIC Drive Controller family
- CVE-2020-28396 Weak cryptography in SICAM A8000 CP-8000
- CVE-2020-28395 Hardcoded credentials in SCALANCE X-200RNA switch family
- CVE-2020-28394 Memory corruption in JT2Go
- CVE-2020-28393 Denial of service in SCALANCE XM-400, XR-500
- CVE-2020-28392 Misconfiguration in SIMARIS configuration
- CVE-2020-28391 Hardcoded credentials in SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- CVE-2020-28390 Information disclosure in Opcenter Execution Core
- CVE-2020-2839 Other in Service Intelligence
- CVE-2020-28388 Weak cryptography in APOGEE PXC Compact (BACnet)
- CVE-2020-28387 XML external entity in Solid Edge SE2020
- CVE-2020-28386 Memory corruption in Solid Edge SE2020
- CVE-2020-28385 Memory corruption in Solid Edge SE2020
- CVE-2020-28384 Memory corruption in Solid Edge SE2020
- CVE-2020-28383 Memory corruption in JT2Go
- CVE-2020-28382 Memory corruption in Solid Edge SE2020
- CVE-2020-28381 Memory corruption in Solid Edge SE2020
- CVE-2020-2838 Other in CRM Gateway for Mobile Devices
- CVE-2020-28374 Path traversal in debian:debian linux
- CVE-2020-28373 Memory corruption in netgear:r6250 firmware
- CVE-2020-28371 Integer overflow in readytalk:avian
- CVE-2020-2837 Other in Marketing
- CVE-2020-28369 Privilege escalation in beyondtrust:privilege management for windows
- CVE-2020-28368 Information disclosure in debian:debian linux
- CVE-2020-28367 Arbitrary code execution via the go command with cgo in cmd/go
- CVE-2020-28366 Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
- CVE-2020-28365 Cross-site scripting in sapplica:sentrifugo
- CVE-2020-28364 Locust Stored Cross-site Scripting Vulnerability
- CVE-2020-28362 Denial of service in fedoraproject:fedora
- CVE-2020-28361 Security feature bypass in kamailio:kamailio
- CVE-2020-28360 Server-Side Request Forgery in private-ip
- CVE-2020-2836 Other in Marketing
- CVE-2020-28351 Cross-site scripting in mitel:shoretel firmware
- CVE-2020-28350 Cross-site scripting in sokrates:sowasql
- CVE-2020-2835 Other in Marketing
- CVE-2020-28349 Denial of service in chirpstack:network server
- CVE-2020-28348 Path Traversal in HashiCorp Nomad
- CVE-2020-28347 Command injection in tp-link:ac1750 firmware
- CVE-2020-28346 Null dereference in projectacrn:acrn
- CVE-2020-28345 Null dereference in google:android
- CVE-2020-28344 Null dereference in google:android
- CVE-2020-28343 Memory corruption in google:android
- CVE-2020-28342 Auth bypass in google:android
- CVE-2020-28341 Memory corruption in google:android
- CVE-2020-28340 Security feature bypass in google:android
- CVE-2020-2834 Other in Marketing
- CVE-2020-28339 Deserialization in welcart:welcart e-commerce
- CVE-2020-28337 Zip slip in Microweber
- CVE-2020-28334 Hardcoded credentials in barco:wepresent wipg-1600w firmware
- CVE-2020-28333 Auth bypass in barco:wepresent wipg-1600w firmware
- CVE-2020-28332 Security feature bypass in barco:wepresent wipg-1600w firmware
- CVE-2020-28331 Missing authorization in barco:wepresent wipg-1600w firmware
- CVE-2020-28330 Information disclosure in barco:wepresent wipg-1600w firmware
- CVE-2020-2833 Other in Quoting
- CVE-2020-28329 Hardcoded credentials in barco:wepresent wipg-1600w firmware
- CVE-2020-28328 File upload in salesagility:suitecrm
- CVE-2020-28327 Use after free in digium:certified asterisk
- CVE-2020-2832 Other in One-to-One Fulfillment
- CVE-2020-2831 Other in Marketing
- CVE-2020-2830 Denial of service in Java
- CVE-2020-2829 Information disclosure in WebLogic Server
- CVE-2020-28283 Prototype pollution vulnerability in 'libnested'
- CVE-2020-28282 Prototype pollution in getobject
- CVE-2020-28281 Prototype pollution in set-object-value
- CVE-2020-28280 Prototype pollution vulnerability in 'predefine'
- CVE-2020-2828 Other in WebLogic Server
- CVE-2020-28279 flattenizer vulnerable to prototype pollution
- CVE-2020-28278 shvl vulnerable to prototype pollution
- CVE-2020-28277 dset vulnerable to prototype pollution
- CVE-2020-28276 Prototype pollution vulnerability in 'deep-set'
- CVE-2020-28274 Prototype pollution vulnerability in 'deepref'
- CVE-2020-28273 Prototype pollution in set-in