2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-19882 | MEDIUM | 4.8 | 0.7% | Aug 24, 2020 | DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for 'menu_description' variable in... |
| CVE-2020-19881 | MEDIUM | 4.8 | 0.9% | Aug 24, 2020 | DBHcms v1.2.0 has a reflected xss vulnerability as there is no security filter in dbhcms\mod\mod.selector.php line 108 f... |
| CVE-2020-19880 | MEDIUM | 6.1 | 0.9% | Aug 24, 2020 | DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function form 'Name' in dbhcms\types.php, A... |
| CVE-2020-19879 | MEDIUM | 6.1 | 0.7% | Aug 24, 2020 | DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter of $_GET['dbhcms_pid'] variable in dbhcms\pa... |
| CVE-2020-14367 | MEDIUM | 6 | 0.5% | Aug 24, 2020 | A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file i... |
| CVE-2020-19877 | MEDIUM | 5.3 | 1.7% | Aug 24, 2020 | DBHcms v1.2.0 has a directory traversal vulnerability as there is no directory control function in directory /dbhcms/. A... |
| CVE-2020-5416 | MEDIUM | 6.5 | 1.2% | Aug 21, 2020 | Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in fro... |
| CVE-2020-9062 | MEDIUM | 5.3 | 0.2% | Aug 21, 2020 | Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify th... |
| CVE-2020-8624 | MEDIUM | 4.3 | 3.6% | Aug 21, 2020 | In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S... |
| CVE-2020-8622 | MEDIUM | 6.5 | 5.5% | Aug 21, 2020 | In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supporte... |
| CVE-2020-8227 | MEDIUM | 6.8 | 22.4% | Aug 21, 2020 | Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Serv... |
| CVE-2020-8189 | MEDIUM | 5.4 | 1.4% | Aug 21, 2020 | A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when ... |
| CVE-2020-15858 | MEDIUM | 6.4 | 0.8% | Aug 21, 2020 | Some devices of Thales DIS (formerly Gemalto, formerly Cinterion) allow Directory Traversal by physically proximate atta... |
| CVE-2020-10123 | MEDIUM | 5.3 | 0.4% | Aug 21, 2020 | The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate sessio... |
| CVE-2020-24591 | MEDIUM | 6.5 | 1.0% | Aug 21, 2020 | The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates. This affects API Manage... |
| CVE-2020-14201 | MEDIUM | 6.5 | 1.6% | Aug 21, 2020 | Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitr... |
| CVE-2020-5775 | MEDIUM | 5.8 | 6.5% | Aug 21, 2020 | Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas appli... |
| CVE-2020-3975 | MEDIUM | 5.4 | 0.5% | Aug 21, 2020 | VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting (XSS... |
| CVE-2020-20633 | MEDIUM | 5.4 | 0.9% | Aug 21, 2020 | ajax_policy_generator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Conse... |
| CVE-2020-7923 | MEDIUM | 6.5 | 1.3% | Aug 21, 2020 | A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which vi... |
| CVE-2020-20634 | MEDIUM | 6.5 | 1.0% | Aug 21, 2020 | Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode feature. This can be exp... |
| CVE-2020-10290 | MEDIUM | 6.8 | 0.4% | Aug 21, 2020 | Universal Robots controller execute URCaps (zip files containing Java-powered applications) without any permission restr... |
| CVE-2020-9246 | MEDIUM | 6.5 | 0.6% | Aug 21, 2020 | FusionCompute 8.0.0 has an information leak vulnerability. A module does not launch strict access control and informatio... |
| CVE-2020-9104 | MEDIUM | 4.3 | 0.3% | Aug 21, 2020 | HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C432E22R2P5),... |
| CVE-2020-9096 | MEDIUM | 5.5 | 0.2% | Aug 21, 2020 | HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0.160(C00E160R2P8) have an out of bound read vulnerability. S... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now