Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 97 of 215.
- CVE-2020-28272 keyget vulnerable to prototype pollution
- CVE-2020-28271 Prototype Pollution in deephas
- CVE-2020-28270 Prototype pollution in object-hierarchy-access
- CVE-2020-2827 Other in One-to-One Fulfillment
- CVE-2020-28269 Prototype Pollution in field
- CVE-2020-28268 Prototype pollution in controlled-merge
- CVE-2020-28267 Prototype pollution in @strikeentco/set
- CVE-2020-2826 Other in One-to-One Fulfillment
- CVE-2020-28251 Privilege escalation in netscout:airmagnet enterprise
- CVE-2020-28250 Auth bypass in cellinx:nvt web server
- CVE-2020-2825 Other in One-to-One Fulfillment
- CVE-2020-28249 Cross-site scripting in Joplin
- CVE-2020-28248 Integer Overflow in png-img
- CVE-2020-28247 Argument injection in lettre
- CVE-2020-28246 Server-Side Template Injection in formio
- CVE-2020-28243 SaltStack Salt command injection via a crafted process name
- CVE-2020-28242 Denial of service in asterisk:certified asterisk
- CVE-2020-28241 Memory corruption in debian:debian linux
- CVE-2020-2824 Other in One-to-One Fulfillment
- CVE-2020-2823 Other in Common Applications Calendar
- CVE-2020-28221 Other in EcoStruxure™ Operator Terminal Expert 3.1 Service Pack 1A and prior running on Harmony HMIs HMIST6 Series, HMIG3U in HMIGTU Series, HMISTO Series and Pro-face BLUE 3.1 Service Pack 1A and prior running on Pro-face HMIs: ST6000 Series, SP-5B41 in SP5000 Series, GP4100 Series
- CVE-2020-28220 Memory corruption in Modicon M258 Firmware (All versions prior to V5.0.4.11) and SoMachine/SoMachine Motion software (All versions)
- CVE-2020-2822 Other in Trade Management
- CVE-2020-28219 Information disclosure in EcoStruxure Geo SCADA Expert 2019 (Original release and Monthly Updates to September 2020, from 81.7268.1 to 81.7578.1) and EcoStruxure Geo SCADA Expert 2020 (Original release and Monthly Updates to September 2020, from 83.7551.1 to 83.7578.1)
- CVE-2020-28218 Other in Easergy T300 (firmware 2.7 and older)
- CVE-2020-28217 Information disclosure in Easergy T300 (firmware 2.7 and older)
- CVE-2020-28216 Information disclosure in Easergy T300 (firmware 2.7 and older)
- CVE-2020-28215 Missing authorization in Easergy T300 (firmware 2.7 and older)
- CVE-2020-28214 Weak cryptography in Modicon M221 (all references, all versions)
- CVE-2020-28213 Supply chain in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- CVE-2020-28212 Auth bypass in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- CVE-2020-28211 Auth bypass in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- CVE-2020-28210 Cross-site scripting in EcoStruxure Building Operation WebStation V2.0 - V3.1
- CVE-2020-2821 Other in Trade Management
- CVE-2020-28209 Privilege escalation in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1
- CVE-2020-28208 Information disclosure in rocket.chat:rocket.chat
- CVE-2020-28206 Auth bypass in bitrix24:bitrix framework
- CVE-2020-28203 Null dereference in foxitsoftware:foxit reader
- CVE-2020-28200 Denial of service in dovecot:dovecot
- CVE-2020-2820 Other in Common Applications Calendar
- CVE-2020-28199 Information disclosure in bestit:amazon pay
- CVE-2020-28198 Memory corruption in ibm:tivoli storage manager
- CVE-2020-28196 Denial of service in fedoraproject:fedora
- CVE-2020-28194 Integer overflow in accel-ppp:accel-ppp
- CVE-2020-28191 Togglz console missing cross-site request forgery (CSRF) protection
- CVE-2020-28190 Weak cryptography in terra-master:tos
- CVE-2020-2819 Other in Universal Work Queue
- CVE-2020-28188 Command injection in terra-master:tos
- CVE-2020-28187 Path traversal in terra-master:tos
- CVE-2020-28186 Auth bypass in terra-master:tos
- CVE-2020-28185 Information disclosure in terra-master:tos
- CVE-2020-28184 Cross-site scripting in terra-master:tos
- CVE-2020-28183 SQL injection in water billing system project:water billing system
- CVE-2020-2818 Other in Universal Work Queue
- CVE-2020-28175 Privilege escalation in almico:speedfan
- CVE-2020-28173 File upload in simple college project:simple college
- CVE-2020-28172 SQL injection in simple college project:simple college
- CVE-2020-2817 Other in Scripting
- CVE-2020-28169 Privilege escalation in debian:debian linux
- CVE-2020-28168 Axios vulnerable to Server-Side Request Forgery
- CVE-2020-28165 File upload in easycorp:zentao
- CVE-2020-28163 Null dereference in libdwarf project:libdwarf
- CVE-2020-2816 Other in Java
- CVE-2020-28150 Open redirect in inetsoftware:i-net clear reports
- CVE-2020-2815 Other in iSupport
- CVE-2020-28149 Cross-site scripting in mydbr:mydbr
- CVE-2020-28146 Cross-site scripting in eyoucms:eyoucms
- CVE-2020-28145 Path traversal in wuzhicms:wuzhicms
- CVE-2020-28144 Memory corruption in moxa:edr-810-2gsfp-t firmware
- CVE-2020-28141 Cross-site scripting in online discussion forum project:online discussion forum
- CVE-2020-28140 File upload in online clothing store project:online clothing store
- CVE-2020-2814 Denial of service in MySQL Server
- CVE-2020-28139 Cross-site scripting in online clothing store project:online clothing store
- CVE-2020-28138 SQL injection in online clothing store project:online clothing store
- CVE-2020-28137 Cross-site request forgery in genexis:platinum 4410 firmware
- CVE-2020-28136 File upload in phpgurukul:tourism management system
- CVE-2020-28133 SQL injection in simple grocery store sales and inventory sales project:simple grocery store sales and inventory system
- CVE-2020-28130 File upload in online library management system project:online library management system
- CVE-2020-2813 Other in Email Center
- CVE-2020-28129 Cross-site scripting in admerc:gym management system
- CVE-2020-28124 Cross Site Scripting (XSS) in LavaLite 5.8.0
- CVE-2020-2812 Denial of service in MySQL Server
- CVE-2020-28119 Cross-site scripting in 53kf:53kf
- CVE-2020-28115 SQL injection in web-audimex:audimexee
- CVE-2020-2811 Cross-site scripting in WebLogic Server
- CVE-2020-28103 SQL injection in chshcms:cscms
- CVE-2020-28102 SQL injection in chshcms:cscms
- CVE-2020-2810 Other in iStore
- CVE-2020-28097 Memory corruption in linux:linux kernel
- CVE-2020-28096 Hardcoded credentials in foscammall:foscam x1 firmware
- CVE-2020-28095 Denial of service in tenda:ac6 firmware
- CVE-2020-28094 Supply chain in tendacn:ac1200 firmware
- CVE-2020-28093 Hardcoded credentials in tendacn:ac1200 firmware
- CVE-2020-28092 Cross-site scripting in pescms:pescms team
- CVE-2020-28091 SQL injection in cxuu:cxuucms
- CVE-2020-2809 Other in E-Business Intelligence
- CVE-2020-28088 Jeecg-Boot CMS arbitrary file upload vulnerability
- CVE-2020-28087 SQL injection in jeecg:jeecg boot
- CVE-2020-28086 Security feature bypass in zx2c4:password-store
- CVE-2020-2808 Other in E-Business Intelligence