2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25700 | MEDIUM | 6.5 | 1.3% | Nov 19, 2020 | In moodle, some database module web services allowed students to add entries within groups they did not belong to. Versi... |
| CVE-2020-9049 | MEDIUM | 5.3 | 0.5% | Nov 19, 2020 | A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could ... |
| CVE-2020-4718 | MEDIUM | 5.4 | 0.6% | Nov 19, 2020 | IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerabili... |
| CVE-2020-15710 | MEDIUM | 6.1 | 0.3% | Nov 19, 2020 | Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. ... |
| CVE-2020-8278 | MEDIUM | 5.3 | 1.0% | Nov 19, 2020 | Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user. |
| CVE-2020-5947 | MEDIUM | 4.3 | 0.7% | Nov 19, 2020 | In versions 16.0.0-16.0.0.1 and 15.1.0-15.1.1, on specific BIG-IP platforms, attackers may be able to obtain TCP sequenc... |
| CVE-2020-26215 | MEDIUM | 6.1 | 1.2% | Nov 18, 2020 | Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook serve... |
| CVE-2020-22723 | MEDIUM | 6.1 | 0.8% | Nov 18, 2020 | A cross-site scripting (XSS) vulnerability in Beijing Liangjing Zhicheng Technology Co., Ltd ljcmsshop version 1.14 allo... |
| CVE-2020-15300 | MEDIUM | 6.1 | 0.7% | Nov 18, 2020 | SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document. |
| CVE-2020-14208 | MEDIUM | 5.4 | 0.6% | Nov 18, 2020 | SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting (XSS) in the Documents preview functionality. This vulnerabi... |
| CVE-2020-13799 | MEDIUM | 6.8 | 0.3% | Nov 18, 2020 | Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specifie... |
| CVE-2020-25454 | MEDIUM | 5.4 | 0.7% | Nov 18, 2020 | Cross-site Scripting (XSS) vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the... |
| CVE-2020-3482 | MEDIUM | 6.5 | 1.4% | Nov 18, 2020 | A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allo... |
| CVE-2020-3471 | MEDIUM | 6.5 | 1.7% | Nov 18, 2020 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker ... |
| CVE-2020-3441 | MEDIUM | 5.3 | 1.5% | Nov 18, 2020 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker ... |
| CVE-2020-4592 | MEDIUM | 6.5 | 0.8% | Nov 18, 2020 | IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corrup... |
| CVE-2020-27126 | MEDIUM | 6.1 | 1.0% | Nov 18, 2020 | A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site ... |
| CVE-2020-26081 | MEDIUM | 6.1 | 0.8% | Nov 18, 2020 | Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote ... |
| CVE-2020-26080 | MEDIUM | 4.1 | 0.7% | Nov 18, 2020 | A vulnerability in the user management functionality of Cisco IoT Field Network Director (FND) could allow an authentica... |
| CVE-2020-26079 | MEDIUM | 4.9 | 1.0% | Nov 18, 2020 | A vulnerability in the web UI of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to... |
| CVE-2020-26078 | MEDIUM | 6.5 | 1.4% | Nov 18, 2020 | A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attack... |
| CVE-2020-26077 | MEDIUM | 4.3 | 0.7% | Nov 18, 2020 | A vulnerability in the access control functionality of Cisco IoT Field Network Director (FND) could allow an authenticat... |
| CVE-2020-26068 | MEDIUM | 6.5 | 0.7% | Nov 18, 2020 | A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authentic... |
| CVE-2020-26933 | MEDIUM | 6 | 0.3% | Nov 18, 2020 | Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.... |
| CVE-2020-26554 | MEDIUM | 6.1 | 1.0% | Nov 18, 2020 | REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail message. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now