2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-24705HIGH8.8An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an att...
CVE-2020-24703HIGH8.8An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an att...
CVE-2020-23972HIGH7.5In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating ...
CVE-2020-4603HIGH7.2IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level re...
CVE-2020-4174HIGH7.5IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to ...
CVE-2020-4169HIGH7.5IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to ...
CVE-2020-17376HIGH8.3An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, a...
CVE-2020-15156HIGH8.1In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a...
CVE-2020-12855HIGH8.8A Host header injection vulnerability has been discovered in SecZetta NEProfile 3.3.11. Authenticated remote adversaries...
CVE-2020-12456HIGH8.8A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to e...
CVE-2020-11797HIGH7.5An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV bef...
CVE-2020-11497HIGH7.5An issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for WordPress. An online payment ...
CVE-2020-13863HIGH8.1The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injecti...
CVE-2020-13617HIGH7.5The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unau...
CVE-2020-3519HIGH8.1A vulnerability in a specific REST API method of Cisco Data Center Network Manager (DCNM) Software could allow an authen...
CVE-2020-3507HIGH8.8Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Came...
CVE-2020-3506HIGH8.8Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Came...
CVE-2020-3443HIGH8.8A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to e...
CVE-2020-5926HIGH7.5In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiat...
CVE-2020-5925HIGH7.5In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6....
CVE-2020-5921HIGH7.5in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6....
CVE-2020-15482HIGH7.8An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by...
CVE-2020-5922HIGH8.8In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, iControl RES...
CVE-2020-5919HIGH7.5In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile c...
CVE-2020-5918HIGH7.5In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6....

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now