2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13594 | MEDIUM | 6.5 | 0.8% | Aug 31, 2020 | The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does n... |
| CVE-2020-12646 | MEDIUM | 5.4 | 0.5% | Aug 31, 2020 | OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document. |
| CVE-2020-12644 | MEDIUM | 5 | 0.7% | Aug 31, 2020 | OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API. |
| CVE-2020-12643 | MEDIUM | 4.3 | 0.6% | Aug 31, 2020 | OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing ... |
| CVE-2020-11617 | MEDIUM | 5.9 | 0.4% | Aug 31, 2020 | The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn't validate the S... |
| CVE-2020-4492 | MEDIUM | 5.5 | 0.3% | Aug 31, 2020 | IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a deni... |
| CVE-2020-15020 | MEDIUM | 5.4 | 0.7% | Aug 31, 2020 | An issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated attacker can achieve stor... |
| CVE-2020-25033 | MEDIUM | 6.1 | 1.0% | Aug 31, 2020 | The Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows subscribe_sidebar.php&status= re... |
| CVE-2020-24104 | MEDIUM | 6.1 | 0.8% | Aug 30, 2020 | XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials wit... |
| CVE-2020-24223 | MEDIUM | 6.1 | 14.6% | Aug 30, 2020 | Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters. |
| CVE-2020-24917 | MEDIUM | 6.1 | 1.2% | Aug 30, 2020 | osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php... |
| CVE-2020-8244 | MEDIUM | 6.5 | 2.1% | Aug 30, 2020 | A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply... |
| CVE-2020-24928 | MEDIUM | 5.3 | 0.9% | Aug 29, 2020 | managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server (port 3020) open to all origi... |
| CVE-2020-24898 | MEDIUM | 6.5 | 0.7% | Aug 29, 2020 | The Table Filter and Charts for Confluence Server app before 5.3.26 (for Atlassian Confluence) allows SSRF via the "Tabl... |
| CVE-2020-16610 | MEDIUM | 4.3 | 0.4% | Aug 28, 2020 | Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenti... |
| CVE-2020-5625 | MEDIUM | 6.1 | 1.0% | Aug 28, 2020 | Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via... |
| CVE-2020-5623 | MEDIUM | 6.1 | 0.8% | Aug 28, 2020 | NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attacke... |
| CVE-2020-5621 | MEDIUM | 4.3 | 0.8% | Aug 28, 2020 | Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlie... |
| CVE-2020-10517 | MEDIUM | 4.3 | 1.1% | Aug 27, 2020 | An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of ... |
| CVE-2020-24618 | MEDIUM | 6.5 | 1.9% | Aug 27, 2020 | In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65... |
| CVE-2020-5383 | MEDIUM | 5.3 | 1.0% | Aug 27, 2020 | Dell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale OneFS version 9.0.0 contains a buffer overflow vulnerability... |
| CVE-2020-24706 | MEDIUM | 6.1 | 0.8% | Aug 27, 2020 | An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager through... |
| CVE-2020-24704 | MEDIUM | 6.1 | 0.7% | Aug 27, 2020 | An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager 2.2.0, ... |
| CVE-2020-24390 | MEDIUM | 6.1 | 1.0% | Aug 27, 2020 | eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/admin_logs page, which might a... |
| CVE-2020-23576 | MEDIUM | 5.4 | 0.5% | Aug 27, 2020 | Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now