2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15826 | MEDIUM | 4.3 | 0.5% | Aug 8, 2020 | In JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have. |
| CVE-2020-15821 | MEDIUM | 6.5 | 0.9% | Aug 8, 2020 | In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft. |
| CVE-2020-15820 | MEDIUM | 5.3 | 1.4% | Aug 8, 2020 | In JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence. |
| CVE-2020-15819 | MEDIUM | 5.3 | 1.4% | Aug 8, 2020 | JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports. |
| CVE-2020-15818 | MEDIUM | 5.3 | 1.4% | Aug 8, 2020 | In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence. |
| CVE-2020-15065 | MEDIUM | 6.5 | 0.5% | Aug 7, 2020 | DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-s... |
| CVE-2020-15064 | MEDIUM | 4.3 | 0.3% | Aug 7, 2020 | DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct per... |
| CVE-2020-15061 | MEDIUM | 6.5 | 0.5% | Aug 7, 2020 | Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to denial-of-s... |
| CVE-2020-15060 | MEDIUM | 4.3 | 0.3% | Aug 7, 2020 | Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to conduct per... |
| CVE-2020-15057 | MEDIUM | 6.5 | 0.5% | Aug 7, 2020 | TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-s... |
| CVE-2020-15056 | MEDIUM | 4.3 | 0.3% | Aug 7, 2020 | TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct per... |
| CVE-2020-5412 | MEDIUM | 6.5 | 10.2% | Aug 7, 2020 | Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow... |
| CVE-2020-15907 | MEDIUM | 6.1 | 0.7% | Aug 7, 2020 | In Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places could execute file or fol... |
| CVE-2020-11985 | MEDIUM | 5.3 | 5.9% | Aug 7, 2020 | IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip... |
| CVE-2020-16168 | MEDIUM | 6.5 | 0.6% | Aug 7, 2020 | Origin Validation Error in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to access... |
| CVE-2020-15701 | MEDIUM | 5.5 | 0.4% | Aug 6, 2020 | An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of ... |
| CVE-2020-15136 | MEDIUM | 6.5 | 1.6% | Aug 6, 2020 | In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV r... |
| CVE-2020-11937 | MEDIUM | 5.5 | 0.5% | Aug 6, 2020 | In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The... |
| CVE-2020-16211 | MEDIUM | 5.5 | 1.3% | Aug 6, 2020 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read vulnerability may be exploited by p... |
| CVE-2020-7459 | MEDIUM | 6.8 | 0.4% | Aug 6, 2020 | In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 1... |
| CVE-2020-9036 | MEDIUM | 6.1 | 3.6% | Aug 5, 2020 | Jeedom through 4.0.38 allows XSS. |
| CVE-2020-15132 | MEDIUM | 5.3 | 1.1% | Aug 5, 2020 | In Sulu before versions 1.6.35, 2.0.10, and 2.1.1, when the "Forget password" feature on the login screen is used, Sulu ... |
| CVE-2020-16254 | MEDIUM | 6.1 | 0.8% | Aug 5, 2020 | The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). |
| CVE-2020-15112 | MEDIUM | 6.5 | 1.3% | Aug 5, 2020 | In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in t... |
| CVE-2020-15106 | MEDIUM | 6.5 | 1.3% | Aug 5, 2020 | In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is st... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now