2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14338 | MEDIUM | 5.3 | 1.3% | Sep 17, 2020 | A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP... |
| CVE-2020-13944 | MEDIUM | 6.1 | 25.1% | Sep 17, 2020 | In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XS... |
| CVE-2020-14181 | MEDIUM | 5.3 | 99.6% | Sep 17, 2020 | Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Infor... |
| CVE-2020-20406 | MEDIUM | 5.4 | 0.7% | Sep 16, 2020 | A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 ... |
| CVE-2020-1694 | MEDIUM | 4.9 | 1.6% | Sep 16, 2020 | A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-au... |
| CVE-2020-25015 | MEDIUM | 6.5 | 3.1% | Sep 16, 2020 | A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally... |
| CVE-2020-14348 | MEDIUM | 4.3 | 0.8% | Sep 16, 2020 | It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the us... |
| CVE-2020-13928 | MEDIUM | 6.1 | 2.6% | Sep 16, 2020 | Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitize... |
| CVE-2020-10748 | MEDIUM | 6.1 | 0.9% | Sep 16, 2020 | A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circ... |
| CVE-2020-10715 | MEDIUM | 4.3 | 0.9% | Sep 16, 2020 | A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw allows an attacker to craft ... |
| CVE-2020-3990 | MEDIUM | 6.5 | 0.3% | Sep 16, 2020 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerabil... |
| CVE-2020-3988 | MEDIUM | 6.1 | 0.3% | Sep 16, 2020 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability ... |
| CVE-2020-3987 | MEDIUM | 6.1 | 0.3% | Sep 16, 2020 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability ... |
| CVE-2020-3986 | MEDIUM | 6.1 | 0.3% | Sep 16, 2020 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability ... |
| CVE-2020-3980 | MEDIUM | 6.7 | 0.3% | Sep 16, 2020 | VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide ... |
| CVE-2020-7529 | MEDIUM | 5.5 | 0.9% | Sep 16, 2020 | A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAP... |
| CVE-2020-4708 | MEDIUM | 5.3 | 1.0% | Sep 16, 2020 | IBM Security Trusteer Pinpoint Detect 11.6.5 could disclose some information due to using a wildcard in the Access-Contr... |
| CVE-2020-24890 | MEDIUM | 5.5 | 1.6% | Sep 16, 2020 | libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in... |
| CVE-2020-1710 | MEDIUM | 5.3 | 1.2% | Sep 16, 2020 | The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a ... |
| CVE-2020-2278 | MEDIUM | 6.5 | 1.4% | Sep 16, 2020 | Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with ... |
| CVE-2020-2277 | MEDIUM | 6.5 | 1.7% | Sep 16, 2020 | Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jen... |
| CVE-2020-2275 | MEDIUM | 6.5 | 1.7% | Sep 16, 2020 | Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins co... |
| CVE-2020-2274 | MEDIUM | 5.5 | 0.3% | Sep 16, 2020 | Jenkins ElasTest Plugin 1.2.1 and earlier stores its server password unencrypted in its global configuration file on the... |
| CVE-2020-2273 | MEDIUM | 4.3 | 0.7% | Sep 16, 2020 | A cross-site request forgery (CSRF) vulnerability in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers to conne... |
| CVE-2020-2272 | MEDIUM | 4.3 | 0.7% | Sep 16, 2020 | A missing permission check in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers with Overall/Read permission to... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now