2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15666 | MEDIUM | 6.5 | 1.2% | Oct 1, 2020 | When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) was... |
| CVE-2020-15665 | MEDIUM | 4.3 | 0.7% | Oct 1, 2020 | Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain on the page. T... |
| CVE-2020-15664 | MEDIUM | 6.5 | 1.4% | Oct 1, 2020 | By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access t... |
| CVE-2020-25200 | MEDIUM | 5.3 | 7.5% | Oct 1, 2020 | Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts. Ini... |
| CVE-2020-15228 | MEDIUM | 5 | 1.4% | Oct 1, 2020 | In the `@actions/core` npm module before version 1.2.6,`addPath` and `exportVariable` functions communicate with the Act... |
| CVE-2020-16844 | MEDIUM | 6.8 | 1.1% | Oct 1, 2020 | In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY ... |
| CVE-2020-24861 | MEDIUM | 5.4 | 0.9% | Oct 1, 2020 | GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is execu... |
| CVE-2020-24860 | MEDIUM | 5.4 | 1.1% | Oct 1, 2020 | CMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit content and put persisten... |
| CVE-2020-25830 | MEDIUM | 4.8 | 1.7% | Sep 30, 2020 | An issue was discovered in MantisBT before 2.24.3. Improper escaping of a custom field's name allows an attacker to inje... |
| CVE-2020-25781 | MEDIUM | 4.3 | 0.9% | Sep 30, 2020 | An issue was discovered in file_download.php in MantisBT before 2.24.3. Users without access to view private issue notes... |
| CVE-2020-25288 | MEDIUM | 4.8 | 1.5% | Sep 30, 2020 | An issue was discovered in MantisBT before 2.24.3. When editing an Issue in a Project where a Custom Field with a crafte... |
| CVE-2020-13336 | MEDIUM | 4.8 | 0.5% | Sep 30, 2020 | An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. GitLab was vulnerable to a stored X... |
| CVE-2020-12869 | MEDIUM | 5.4 | 0.6% | Sep 30, 2020 | RainbowFish PacsOne Server 6.8.4 allows XSS. |
| CVE-2020-25816 | MEDIUM | 6.8 | 1.0% | Sep 30, 2020 | HashiCorp Vault and Vault Enterprise versions 1.0 and newer allowed leases created with a batch token to outlive their T... |
| CVE-2020-25626 | MEDIUM | 6.1 | 1.3% | Sep 30, 2020 | A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer... |
| CVE-2020-8256 | MEDIUM | 4.9 | 3.4% | Sep 30, 2020 | A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain ... |
| CVE-2020-8238 | MEDIUM | 6.1 | 1.7% | Sep 30, 2020 | A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could ... |
| CVE-2020-26137 | MEDIUM | 6.5 | 2.2% | Sep 30, 2020 | urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserti... |
| CVE-2020-26043 | MEDIUM | 6.1 | 0.7% | Sep 30, 2020 | An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php |
| CVE-2020-25761 | MEDIUM | 6.1 | 1.8% | Sep 30, 2020 | Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on ... |
| CVE-2020-24721 | MEDIUM | 5.7 | 0.3% | Sep 30, 2020 | An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in CO... |
| CVE-2020-24570 | MEDIUM | 6.5 | 0.5% | Sep 30, 2020 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resu... |
| CVE-2020-24569 | MEDIUM | 4.3 | 0.7% | Sep 30, 2020 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection i... |
| CVE-2020-22842 | MEDIUM | 5.4 | 0.5% | Sep 30, 2020 | CMS Made Simple before 2.2.15 allows XSS via the m1_mod parameter in a ModuleManager local_uninstall action to admin/mod... |
| CVE-2020-22481 | MEDIUM | 6.1 | 0.6% | Sep 30, 2020 | An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now