2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28577 | MEDIUM | 5.3 | 3.2% | Dec 1, 2020 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allo... |
| CVE-2020-28576 | MEDIUM | 5.3 | 3.2% | Dec 1, 2020 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allo... |
| CVE-2020-28575 | MEDIUM | 6.7 | 0.7% | Dec 1, 2020 | A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an ... |
| CVE-2020-28573 | MEDIUM | 5.3 | 3.2% | Dec 1, 2020 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allo... |
| CVE-2020-29315 | MEDIUM | 5.4 | 1.0% | Dec 1, 2020 | ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script ... |
| CVE-2020-7546 | MEDIUM | 5.4 | 0.6% | Dec 1, 2020 | A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStru... |
| CVE-2020-4128 | MEDIUM | 5.3 | 0.9% | Dec 1, 2020 | HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker ... |
| CVE-2020-15257 | MEDIUM | 5.2 | 3.2% | Dec 1, 2020 | containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd b... |
| CVE-2020-4129 | MEDIUM | 5.3 | 0.9% | Dec 1, 2020 | HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker coul... |
| CVE-2020-4126 | MEDIUM | 5.9 | 0.7% | Dec 1, 2020 | HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacke... |
| CVE-2020-14193 | MEDIUM | 5.4 | 0.8% | Nov 30, 2020 | Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache template... |
| CVE-2020-4127 | MEDIUM | 6.5 | 0.5% | Nov 30, 2020 | HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into ac... |
| CVE-2020-29441 | MEDIUM | 6.5 | 0.9% | Nov 30, 2020 | An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0. An unauthenticated attacker c... |
| CVE-2020-29440 | MEDIUM | 4.6 | 0.2% | Nov 30, 2020 | Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob w... |
| CVE-2020-29439 | MEDIUM | 4.6 | 0.4% | Nov 30, 2020 | Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a ... |
| CVE-2020-29438 | MEDIUM | 6.5 | 0.4% | Nov 30, 2020 | Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This... |
| CVE-2020-29395 | MEDIUM | 6.1 | 11.7% | Nov 30, 2020 | The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field. |
| CVE-2020-27587 | MEDIUM | 6.7 | 0.4% | Nov 30, 2020 | Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access to files in the File Vau... |
| CVE-2020-27586 | MEDIUM | 5.9 | 0.7% | Nov 30, 2020 | Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text. |
| CVE-2020-27585 | MEDIUM | 4.4 | 0.3% | Nov 30, 2020 | Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings v... |
| CVE-2020-17901 | MEDIUM | 6.5 | 0.4% | Nov 30, 2020 | Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user. |
| CVE-2020-29392 | MEDIUM | 4.6 | 0.4% | Nov 30, 2020 | The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a *#06#* backdoor password. An attacker with physical acce... |
| CVE-2020-29364 | MEDIUM | 4.8 | 0.6% | Nov 30, 2020 | In NetArt News Lister 1.0.0, the news headlines vulnerable to stored xss attacks. Attackers can inject codes in news tit... |
| CVE-2020-4900 | MEDIUM | 5.5 | 0.3% | Nov 30, 2020 | IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files that could be read by a ... |
| CVE-2020-4696 | MEDIUM | 4.3 | 0.7% | Nov 30, 2020 | IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which could allow an authenticated use... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now