2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4328 | MEDIUM | 6.3 | 1.2% | Aug 3, 2020 | IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted S... |
| CVE-2020-14311 | MEDIUM | 6 | 0.5% | Jul 31, 2020 | There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a sy... |
| CVE-2020-14310 | MEDIUM | 6 | 0.5% | Jul 31, 2020 | There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max... |
| CVE-2020-5414 | MEDIUM | 5.7 | 0.7% | Jul 31, 2020 | VMware Tanzu Application Service for VMs (2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x vers... |
| CVE-2020-15870 | MEDIUM | 6.1 | 0.7% | Jul 31, 2020 | Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2). |
| CVE-2020-15869 | MEDIUM | 5.4 | 0.7% | Jul 31, 2020 | Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2). |
| CVE-2020-15128 | MEDIUM | 6.3 | 0.7% | Jul 31, 2020 | In OctoberCMS before version 1.0.468, encrypted cookie values were not tied to the name of the cookie the value belonged... |
| CVE-2020-9249 | MEDIUM | 6.5 | 0.3% | Jul 31, 2020 | HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of service vulnerability. A mod... |
| CVE-2020-9248 | MEDIUM | 6.7 | 0.2% | Jul 31, 2020 | Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly an... |
| CVE-2020-14337 | MEDIUM | 5.8 | 1.5% | Jul 31, 2020 | A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw a... |
| CVE-2020-3462 | MEDIUM | 6.3 | 0.7% | Jul 31, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authent... |
| CVE-2020-3461 | MEDIUM | 5.3 | 1.2% | Jul 31, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe... |
| CVE-2020-3460 | MEDIUM | 6.1 | 0.7% | Jul 31, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe... |
| CVE-2020-7205 | MEDIUM | 6.7 | 0.4% | Jul 30, 2020 | A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and H... |
| CVE-2020-15129 | MEDIUM | 4.7 | 8.2% | Jul 30, 2020 | In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik... |
| CVE-2020-16157 | MEDIUM | 5.4 | 14.4% | Jul 30, 2020 | A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu. |
| CVE-2020-15511 | MEDIUM | 5.3 | 0.9% | Jul 30, 2020 | HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user registration even when ... |
| CVE-2020-8222 | MEDIUM | 6.8 | 2.3% | Jul 30, 2020 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the admi... |
| CVE-2020-8221 | MEDIUM | 4.9 | 2.3% | Jul 30, 2020 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbi... |
| CVE-2020-8220 | MEDIUM | 6.5 | 2.5% | Jul 30, 2020 | A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform... |
| CVE-2020-8217 | MEDIUM | 5.4 | 1.4% | Jul 30, 2020 | A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used f... |
| CVE-2020-8216 | MEDIUM | 4.3 | 2.3% | Jul 30, 2020 | An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to ... |
| CVE-2020-8213 | MEDIUM | 5.3 | 1.1% | Jul 30, 2020 | An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attacke... |
| CVE-2020-8204 | MEDIUM | 6.1 | 1.8% | Jul 30, 2020 | A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page. |
| CVE-2020-8202 | MEDIUM | 5.3 | 1.3% | Jul 30, 2020 | Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now