2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8194 | MEDIUM | 6.5 | 10.7% | Jul 10, 2020 | Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14... |
| CVE-2020-8193 | MEDIUM | 6.5 | 88.4% | Jul 10, 2020 | Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 ... |
| CVE-2020-8191 | MEDIUM | 6.1 | 22.9% | Jul 10, 2020 | Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.1... |
| CVE-2020-8181 | MEDIUM | 4.3 | 0.8% | Jul 10, 2020 | A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars. |
| CVE-2020-9260 | MEDIUM | 6.5 | 0.3% | Jul 10, 2020 | HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than 1... |
| CVE-2020-9258 | MEDIUM | 5.5 | 0.2% | Jul 10, 2020 | HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerabil... |
| CVE-2020-5607 | MEDIUM | 6.1 | 1.2% | Jul 10, 2020 | Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web ... |
| CVE-2020-4173 | MEDIUM | 4.3 | 0.9% | Jul 9, 2020 | IBM Guardium Activity Insights 10.6 and 11.0 does not set the secure attribute on authorization tokens or session cookie... |
| CVE-2020-15299 | MEDIUM | 6.1 | 47.0% | Jul 9, 2020 | A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remot... |
| CVE-2020-15092 | MEDIUM | 4.8 | 1.1% | Jul 9, 2020 | In TimelineJS before version 3.7.0, some user data renders as HTML. An attacker could implement an XSS exploit with mali... |
| CVE-2020-15001 | MEDIUM | 5.3 | 0.6% | Jul 9, 2020 | An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP applicatio... |
| CVE-2020-15000 | MEDIUM | 5.9 | 0.7% | Jul 9, 2020 | A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has three passwords: Admin P... |
| CVE-2020-14171 | MEDIUM | 6.5 | 0.6% | Jul 9, 2020 | Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted repo... |
| CVE-2020-14170 | MEDIUM | 4.3 | 0.8% | Jul 9, 2020 | Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the cont... |
| CVE-2020-13132 | MEDIUM | 4.6 | 0.6% | Jul 9, 2020 | An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_g... |
| CVE-2020-13131 | MEDIUM | 4.3 | 0.5% | Jul 9, 2020 | An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-too... |
| CVE-2020-15526 | MEDIUM | 5.9 | 0.5% | Jul 9, 2020 | In Redgate SQL Monitor 7.1.4 through 10.1.6 (inclusive), the scope for disabling some TLS security certificate checks ca... |
| CVE-2020-10756 | MEDIUM | 6.5 | 0.5% | Jul 9, 2020 | An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occ... |
| CVE-2020-13992 | MEDIUM | 6.1 | 1.2% | Jul 9, 2020 | An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A Stored XSS issue allows remote unauthenticated attack... |
| CVE-2020-12425 | MEDIUM | 6.5 | 1.4% | Jul 9, 2020 | Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leadi... |
| CVE-2020-12421 | MEDIUM | 6.5 | 1.8% | Jul 9, 2020 | When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were le... |
| CVE-2020-12418 | MEDIUM | 6.5 | 3.0% | Jul 9, 2020 | Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicio... |
| CVE-2020-12415 | MEDIUM | 6.5 | 1.3% | Jul 9, 2020 | When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to... |
| CVE-2020-12414 | MEDIUM | 6.5 | 0.7% | Jul 9, 2020 | IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was bei... |
| CVE-2020-12412 | MEDIUM | 4.3 | 0.8% | Jul 9, 2020 | By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now