2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-21244 | MEDIUM | 4.9 | 1.0% | Sep 30, 2020 | An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via... |
| CVE-2020-19676 | MEDIUM | 5.3 | 1.4% | Sep 30, 2020 | Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details in... |
| CVE-2020-19670 | MEDIUM | 4.9 | 0.9% | Sep 30, 2020 | In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any... |
| CVE-2020-15595 | MEDIUM | 4.3 | 2.2% | Sep 30, 2020 | An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element Configuration feature (to ... |
| CVE-2020-15594 | MEDIUM | 4.3 | 1.8% | Sep 30, 2020 | An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration fe... |
| CVE-2020-13953 | MEDIUM | 5.3 | 2.7% | Sep 30, 2020 | In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder... |
| CVE-2020-13794 | MEDIUM | 4.3 | 1.3% | Sep 30, 2020 | Harbor 1.9.* 1.10.* and 2.0.* allows Exposure of Sensitive Information to an Unauthorized Actor. |
| CVE-2020-13331 | MEDIUM | 5.4 | 0.7% | Sep 30, 2020 | An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by in... |
| CVE-2020-13330 | MEDIUM | 5.4 | 0.6% | Sep 30, 2020 | An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS in im... |
| CVE-2020-13329 | MEDIUM | 6.5 | 0.6% | Sep 30, 2020 | An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab was vulnerable to a stor... |
| CVE-2020-13328 | MEDIUM | 4.8 | 0.6% | Sep 30, 2020 | An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to... |
| CVE-2020-13326 | MEDIUM | 4.3 | 0.7% | Sep 30, 2020 | A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github pro... |
| CVE-2020-13324 | MEDIUM | 6.5 | 1.0% | Sep 30, 2020 | A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user... |
| CVE-2020-13320 | MEDIUM | 6.5 | 1.0% | Sep 30, 2020 | An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to... |
| CVE-2020-13319 | MEDIUM | 4.3 | 0.8% | Sep 30, 2020 | An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check... |
| CVE-2020-5132 | MEDIUM | 5.3 | 1.0% | Sep 30, 2020 | SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as d... |
| CVE-2020-15216 | MEDIUM | 6.5 | 0.9% | Sep 29, 2020 | In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an... |
| CVE-2020-25775 | MEDIUM | 6.3 | 0.3% | Sep 29, 2020 | The Trend Micro Security 2020 (v16) consumer family of products is vulnerable to a security race condition arbitrary fil... |
| CVE-2020-25774 | MEDIUM | 4.3 | 2.1% | Sep 29, 2020 | A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-b... |
| CVE-2020-25772 | MEDIUM | 5.5 | 1.3% | Sep 29, 2020 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl... |
| CVE-2020-25771 | MEDIUM | 5.5 | 1.3% | Sep 29, 2020 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl... |
| CVE-2020-25770 | MEDIUM | 5.5 | 1.3% | Sep 29, 2020 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl... |
| CVE-2020-24565 | MEDIUM | 5.5 | 1.3% | Sep 29, 2020 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl... |
| CVE-2020-24564 | MEDIUM | 5.5 | 1.3% | Sep 29, 2020 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl... |
| CVE-2020-26120 | MEDIUM | 6.1 | 1.0% | Sep 27, 2020 | XSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is mishandled during regex s... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now