2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6565 | MEDIUM | 6.5 | 1.5% | Sep 21, 2020 | Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoof... |
| CVE-2020-6564 | MEDIUM | 6.5 | 1.5% | Sep 21, 2020 | Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof th... |
| CVE-2020-6563 | MEDIUM | 6.5 | 1.7% | Sep 21, 2020 | Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote at... |
| CVE-2020-6562 | MEDIUM | 6.5 | 1.5% | Sep 21, 2020 | Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-... |
| CVE-2020-6561 | MEDIUM | 6.5 | 1.5% | Sep 21, 2020 | Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker... |
| CVE-2020-6560 | MEDIUM | 6.5 | 1.6% | Sep 21, 2020 | Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cro... |
| CVE-2020-6558 | MEDIUM | 6.5 | 1.8% | Sep 21, 2020 | Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to byp... |
| CVE-2020-6547 | MEDIUM | 6.5 | 1.1% | Sep 21, 2020 | Incorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially obtain s... |
| CVE-2020-6538 | MEDIUM | 6.5 | 1.0% | Sep 21, 2020 | Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to ... |
| CVE-2020-15966 | MEDIUM | 4.3 | 1.3% | Sep 21, 2020 | Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced ... |
| CVE-2020-15959 | MEDIUM | 4.3 | 1.2% | Sep 21, 2020 | Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced ... |
| CVE-2020-4731 | MEDIUM | 6.1 | 0.7% | Sep 21, 2020 | IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar... |
| CVE-2020-4590 | MEDIUM | 6.5 | 1.2% | Sep 21, 2020 | IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server f... |
| CVE-2020-4315 | MEDIUM | 4.3 | 1.2% | Sep 21, 2020 | IBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on authorization tokens or sessi... |
| CVE-2020-16171 | MEDIUM | 6.5 | 5.5% | Sep 21, 2020 | An issue was discovered in Acronis Cyber Backup before 12.5 Build 16342. Some API endpoints on port 9877 under /api/ams/... |
| CVE-2020-14180 | MEDIUM | 4.3 | 0.8% | Sep 21, 2020 | Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-ad... |
| CVE-2020-14179 | MEDIUM | 5.3 | 76.0% | Sep 21, 2020 | Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field ... |
| CVE-2020-14177 | MEDIUM | 6.5 | 2.2% | Sep 21, 2020 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availabili... |
| CVE-2020-25789 | MEDIUM | 6.1 | 0.9% | Sep 19, 2020 | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript in... |
| CVE-2020-25786 | MEDIUM | 6.1 | 1.0% | Sep 19, 2020 | webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header.... |
| CVE-2020-5421 | MEDIUM | 6.5 | 10.7% | Sep 19, 2020 | In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versio... |
| CVE-2020-8245 | MEDIUM | 6.1 | 0.9% | Sep 18, 2020 | Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1... |
| CVE-2020-8200 | MEDIUM | 6.5 | 1.3% | Sep 18, 2020 | Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Mi... |
| CVE-2020-9084 | MEDIUM | 6.5 | 0.2% | Sep 18, 2020 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, ... |
| CVE-2020-25633 | MEDIUM | 5.3 | 1.2% | Sep 18, 2020 | A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain t... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now