2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15161 | MEDIUM | 6.1 | 0.9% | Sep 24, 2020 | In PrestaShop from version 1.6.0.4 and before version 1.7.6.8 an attacker is able to inject javascript while using the c... |
| CVE-2020-8348 | MEDIUM | 6.1 | 1.0% | Sep 24, 2020 | A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1... |
| CVE-2020-8347 | MEDIUM | 6.1 | 1.1% | Sep 24, 2020 | A reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.... |
| CVE-2020-15930 | MEDIUM | 6.1 | 4.4% | Sep 24, 2020 | An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag. |
| CVE-2020-3524 | MEDIUM | 6.8 | 0.3% | Sep 24, 2020 | A vulnerability in the Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco 4000 Series Integrated Services Routers, Cis... |
| CVE-2020-3516 | MEDIUM | 4.3 | 1.7% | Sep 24, 2020 | A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker ... |
| CVE-2020-3513 | MEDIUM | 6.7 | 0.3% | Sep 24, 2020 | Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cis... |
| CVE-2020-3503 | MEDIUM | 6 | 0.3% | Sep 24, 2020 | A vulnerability in the file system permissions of Cisco IOS XE Software could allow an authenticated, local attacker to ... |
| CVE-2020-3487 | MEDIUM | 6.5 | 0.5% | Sep 24, 2020 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco... |
| CVE-2020-3486 | MEDIUM | 6.5 | 0.6% | Sep 24, 2020 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco... |
| CVE-2020-3477 | MEDIUM | 5.5 | 0.3% | Sep 24, 2020 | A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local at... |
| CVE-2020-3476 | MEDIUM | 6 | 0.3% | Sep 24, 2020 | A vulnerability in the CLI implementation of a specific command of Cisco IOS XE Software could allow an authenticated, l... |
| CVE-2020-3465 | MEDIUM | 6.5 | 0.7% | Sep 24, 2020 | A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a device to reload. ... |
| CVE-2020-3429 | MEDIUM | 6.5 | 0.7% | Sep 24, 2020 | A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco ... |
| CVE-2020-3428 | MEDIUM | 6.5 | 0.5% | Sep 24, 2020 | A vulnerability in the WLAN Local Profiling feature of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst ... |
| CVE-2020-3423 | MEDIUM | 6.7 | 0.4% | Sep 24, 2020 | A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an ... |
| CVE-2020-3418 | MEDIUM | 4.7 | 0.4% | Sep 24, 2020 | A vulnerability in Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9800 Series Routers could allow an unaut... |
| CVE-2020-3417 | MEDIUM | 6.7 | 0.4% | Sep 24, 2020 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to execute persistent code at boot... |
| CVE-2020-3416 | MEDIUM | 6.7 | 0.3% | Sep 24, 2020 | Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cis... |
| CVE-2020-12815 | MEDIUM | 5.4 | 0.9% | Sep 24, 2020 | An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker ... |
| CVE-2020-12811 | MEDIUM | 6.1 | 0.8% | Sep 24, 2020 | A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow att... |
| CVE-2020-12841 | MEDIUM | 6.5 | 0.5% | Sep 24, 2020 | ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php |
| CVE-2020-12840 | MEDIUM | 6.5 | 0.5% | Sep 24, 2020 | ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php |
| CVE-2020-12281 | MEDIUM | 6.5 | 0.5% | Sep 24, 2020 | iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php. |
| CVE-2020-26088 | MEDIUM | 5.5 | 0.4% | Sep 24, 2020 | A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used b... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now