2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-20096 | MEDIUM | 6.5 | 1.4% | Mar 23, 2022 | Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to... |
| CVE-2020-20095 | MEDIUM | 6.5 | 1.3% | Mar 23, 2022 | iMessage (Messages app) iOS 12.4 and prior user interface does not properly represent URI messages to the user, which re... |
| CVE-2020-20094 | MEDIUM | 6.5 | 1.4% | Mar 23, 2022 | Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages t... |
| CVE-2020-20093 | MEDIUM | 6.5 | 2.3% | Mar 23, 2022 | The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly... |
| CVE-2020-25193 | MEDIUM | 5.3 | 0.8% | Mar 18, 2022 | By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions... |
| CVE-2020-25184 | MEDIUM | 5.5 | 0.4% | Mar 18, 2022 | Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same ... |
| CVE-2020-25182 | MEDIUM | 6.7 | 0.4% | Mar 18, 2022 | Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled ... |
| CVE-2020-25180 | MEDIUM | 6.5 | 1.1% | Mar 18, 2022 | Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is requir... |
| CVE-2020-15388 | MEDIUM | 6.5 | 0.7% | Mar 18, 2022 | A vulnerability in the Brocade Fabric OS before Brocade Fabric OS v9.0.1a, v8.2.3, v8.2.0_CBN4, and v7.4.2h could allow ... |
| CVE-2020-36519 | MEDIUM | 4.9 | 0.8% | Mar 16, 2022 | Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This o... |
| CVE-2020-4989 | MEDIUM | 4.3 | 0.7% | Mar 15, 2022 | IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow an... |
| CVE-2020-14112 | MEDIUM | 5.3 | 0.7% | Mar 10, 2022 | Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing conf... |
| CVE-2020-18327 | MEDIUM | 6.1 | 0.9% | Mar 4, 2022 | Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter i... |
| CVE-2020-18325 | MEDIUM | 6.1 | 2.1% | Mar 4, 2022 | Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel. |
| CVE-2020-18324 | MEDIUM | 6.1 | 2.7% | Mar 4, 2022 | Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template. |
| CVE-2020-15936 | MEDIUM | 4.5 | 0.6% | Mar 1, 2022 | A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and b... |
| CVE-2020-4925 | MEDIUM | 5.5 | 0.2% | Mar 1, 2022 | A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requ... |
| CVE-2020-36510 | MEDIUM | 6.1 | 2.6% | Feb 28, 2022 | The 15Zine WordPress theme before 3.3.0 does not sanitise and escape the cbi parameter before outputing it back in the r... |
| CVE-2020-27958 | MEDIUM | 4.3 | 1.0% | Feb 26, 2022 | The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote auth... |
| CVE-2020-36516 | MEDIUM | 5.9 | 0.7% | Feb 26, 2022 | An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID a... |
| CVE-2020-14504 | MEDIUM | 5.3 | 1.2% | Feb 24, 2022 | The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, una... |
| CVE-2020-14502 | MEDIUM | 6.1 | 1.0% | Feb 24, 2022 | The web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker... |
| CVE-2020-14480 | MEDIUM | 5.5 | 0.3% | Feb 24, 2022 | Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker coul... |
| CVE-2020-10635 | MEDIUM | 4.3 | 0.3% | Feb 24, 2022 | Simulation models for KUKA.Sim Pro version 3.1 are hosted by a server maintained by KUKA. When these devices request a m... |
| CVE-2020-10632 | MEDIUM | 5.3 | 0.5% | Feb 24, 2022 | Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of import... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now