2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4929 | MEDIUM | 5.4 | 0.5% | May 5, 2021 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja... |
| CVE-2020-4883 | MEDIUM | 6.5 | 0.8% | May 5, 2021 | IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further atta... |
| CVE-2020-13665 | CRITICAL | 9.8 | 1.3% | May 5, 2021 | Access bypass vulnerability in Drupal Core allows JSON:API when JSON:API is in read/write mode. Only sites that have the... |
| CVE-2020-13664 | HIGH | 8.8 | 3.0% | May 5, 2021 | Arbitrary PHP code execution vulnerability in Drupal Core under certain circumstances. An attacker could trick an admini... |
| CVE-2020-13662 | MEDIUM | 6.1 | 0.9% | May 5, 2021 | Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which woul... |
| CVE-2020-13666 | MEDIUM | 6.1 | 2.9% | May 5, 2021 | Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XS... |
| CVE-2020-36334 | HIGH | 8.8 | 0.6% | May 5, 2021 | themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database. |
| CVE-2020-36333 | CRITICAL | 9.1 | 3.4% | May 5, 2021 | themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard... |
| CVE-2020-22428 | MEDIUM | 4.8 | 1.2% | May 5, 2021 | SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an a... |
| CVE-2020-4987 | MEDIUM | 5.4 | 0.5% | May 4, 2021 | The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and pr... |
| CVE-2020-21999 | HIGH | 8.8 | 5.2% | May 4, 2021 | iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using de... |
| CVE-2020-27518 | HIGH | 7.8 | 0.5% | May 4, 2021 | All versions of Windscribe VPN for Mac and Windows <= v2.02.10 contain a local privilege escalation vulnerability in the... |
| CVE-2020-23083 | CRITICAL | 9.8 | 3.7% | May 3, 2021 | Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges ... |
| CVE-2020-23015 | MEDIUM | 6.1 | 2.7% | May 3, 2021 | An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not fil... |
| CVE-2020-35758 | CRITICAL | 9.8 | 1.6% | May 3, 2021 | An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a Authentication Bypass in the Web Interface... |
| CVE-2020-35757 | CRITICAL | 9.8 | 1.8% | May 3, 2021 | An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is Unauthenticated Root ADB Access Over TCP. Th... |
| CVE-2020-35756 | HIGH | 7.5 | 1.2% | May 3, 2021 | An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service GETPASS Configuration Passwor... |
| CVE-2020-35755 | HIGH | 7.5 | 1.1% | May 3, 2021 | An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service Read_ NVRAM Direct Access Inf... |
| CVE-2020-28945 | MEDIUM | 6.1 | 1.1% | May 3, 2021 | OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as  suffers from a memory corruption vulnerability in the /nova/bin/traceroute... |
| CVE-2020-20218 | MEDIUM | 6.5 | 2.0% | May 3, 2021 | Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute pro... |
| CVE-2020-28944 | HIGH | 7.5 | 1.6% | Apr 30, 2021 | OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of d... |
| CVE-2020-28943 | MEDIUM | 6.5 | 1.2% | Apr 30, 2021 | OX App Suite 7.10.4 and earlier allows SSRF via a snippet. |
| CVE-2020-18084 | MEDIUM | 6.1 | 1.3% | Apr 30, 2021 | Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into t... |
| CVE-2020-7731 | HIGH | 7.5 | 1.7% | Apr 30, 2021 | This affects all versions <0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereferen... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now