2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-24568 | MEDIUM | 6.5 | 0.8% | Oct 2, 2020 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection i... |
| CVE-2020-15230 | MEDIUM | 6.5 | 1.5% | Oct 2, 2020 | Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem pa... |
| CVE-2020-5422 | MEDIUM | 6.5 | 0.9% | Oct 2, 2020 | BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH d... |
| CVE-2020-7070 | MEDIUM | 5.3 | 5.0% | Oct 2, 2020 | In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cook... |
| CVE-2020-7069 | MEDIUM | 6.5 | 2.0% | Oct 2, 2020 | In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_en... |
| CVE-2020-26135 | MEDIUM | 6.1 | 1.0% | Oct 2, 2020 | Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO. |
| CVE-2020-26134 | MEDIUM | 6.1 | 1.1% | Oct 2, 2020 | Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode. |
| CVE-2020-17482 | MEDIUM | 4.3 | 2.6% | Oct 2, 2020 | An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to inser... |
| CVE-2020-14294 | MEDIUM | 6.1 | 1.2% | Oct 2, 2020 | An issue was discovered in Secudos Qiata FTA 1.70.19. The comment feature allows persistent XSS that is executed when re... |
| CVE-2020-13168 | MEDIUM | 6.1 | 1.0% | Oct 2, 2020 | SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter. |
| CVE-2020-26536 | MEDIUM | 5.5 | 0.9% | Oct 2, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PD... |
| CVE-2020-26524 | MEDIUM | 5.3 | 1.4% | Oct 2, 2020 | CodeLathe FileCloud before 20.2.0.11915 allows username enumeration. |
| CVE-2020-26523 | MEDIUM | 6.1 | 0.7% | Oct 2, 2020 | Froala Editor before 3.2.2 allows XSS via pasted content. |
| CVE-2020-26519 | MEDIUM | 5.5 | 1.0% | Oct 2, 2020 | Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a de... |
| CVE-2020-5789 | MEDIUM | 6.5 | 1.3% | Oct 1, 2020 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to read the cont... |
| CVE-2020-5788 | MEDIUM | 6.5 | 1.2% | Oct 1, 2020 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitr... |
| CVE-2020-5787 | MEDIUM | 6.5 | 1.6% | Oct 1, 2020 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitr... |
| CVE-2020-5785 | MEDIUM | 6.1 | 0.7% | Oct 1, 2020 | Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an unauthenticated attacker to conduct r... |
| CVE-2020-5784 | MEDIUM | 6.5 | 0.7% | Oct 1, 2020 | Server-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user to cause the applicatio... |
| CVE-2020-5387 | MEDIUM | 4.4 | 0.3% | Oct 1, 2020 | Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker w... |
| CVE-2020-14223 | MEDIUM | 6.1 | 0.6% | Oct 1, 2020 | HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The vulnerability could be employed i... |
| CVE-2020-13940 | MEDIUM | 5.5 | 1.9% | Oct 1, 2020 | In Apache NiFi 1.0.0 to 1.11.4, the notification service manager and various policy authorizer and user group provider o... |
| CVE-2020-15677 | MEDIUM | 6.1 | 1.6% | Oct 1, 2020 | By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the down... |
| CVE-2020-15676 | MEDIUM | 6.1 | 1.6% | Oct 1, 2020 | Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScr... |
| CVE-2020-15668 | MEDIUM | 4.3 | 0.5% | Oct 1, 2020 | A lock was missing when accessing a data structure and importing certificate information into the trust database. This v... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now