2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-26305HIGH7.5CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that ...
CVE-2020-26304HIGH7.5Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerabl...
CVE-2020-26303HIGH7.5insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are...
CVE-2020-36842HIGH8.8The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing c...
CVE-2020-36839HIGH8.3The WP Lead Plus X plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0....
CVE-2020-36838HIGH7.4The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp...
CVE-2020-36836HIGH8The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and i...
CVE-2020-36830HIGH7.5A vulnerability was found in nescalante urlregex up to 0.5.0 and classified as problematic. This issue affects some unkn...
CVE-2020-11847HIGH7.8SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. T...
CVE-2020-11846HIGH7.5A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a ...
CVE-2020-11640HIGH8.8AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use i...
CVE-2020-11639HIGH7.8An attacker could exploit the vulnerability by injecting garbage data or specially crafted data. Depending on the data i...
CVE-2020-24102HIGH7.6Directory Traversal vulnerability in Punkbuster pbsv.d64 2.351, allows remote attackers to execute arbitrary code.
CVE-2020-27352HIGH8.8When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate...
CVE-2020-36788HIGH7.8In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: avoid a use-after-free when BO init fa...
CVE-2020-26312HIGH8.1Dotmesh is a git-like command-line interface for capturing, organizing and sharing application states. In versions 0.8.1...
CVE-2020-18305HIGH8Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to r...
CVE-2020-4874HIGH7.5IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an ...
CVE-2020-27478HIGH7.1Cross Site Scripting vulnerability found in Simplcommerce v.40734964b0811f3cbaf64b6dac261683d256f961 thru 3103357200c70b...
CVE-2020-22539HIGH7.2An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitr...
CVE-2020-8006HIGH8.8The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploit...
CVE-2020-36829HIGH7.5The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to gue...
CVE-2020-25730HIGH8.2Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary...
CVE-2020-11862HIGH7.5Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux...
CVE-2020-36785HIGH7.8In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Fix use after free in atomisp_alloc...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now