2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7071 | MEDIUM | 5.3 | 3.0% | Feb 15, 2021 | In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($ur... |
| CVE-2020-29451 | MEDIUM | 4.3 | 0.8% | Feb 15, 2021 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Info... |
| CVE-2020-36237 | MEDIUM | 5.3 | 1.2% | Feb 15, 2021 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field o... |
| CVE-2020-36236 | MEDIUM | 6.1 | 1.3% | Feb 15, 2021 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript... |
| CVE-2020-36235 | MEDIUM | 5.3 | 2.0% | Feb 15, 2021 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field a... |
| CVE-2020-36234 | MEDIUM | 4.8 | 1.0% | Feb 15, 2021 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript... |
| CVE-2020-13949 | HIGH | 7.5 | 6.8% | Feb 12, 2021 | In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory a... |
| CVE-2020-27869 | HIGH | 8.8 | 5.1% | Feb 12, 2021 | This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Perfor... |
| CVE-2020-27868 | CRITICAL | 9.8 | 81.2% | Feb 12, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0... |
| CVE-2020-27867 | MEDIUM | 6.8 | 2.3% | Feb 12, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R602... |
| CVE-2020-27866 | HIGH | 8.8 | 8.7% | Feb 12, 2021 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020... |
| CVE-2020-27865 | HIGH | 8.8 | 2.5% | Feb 12, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1... |
| CVE-2020-27864 | HIGH | 8.8 | 9.8% | Feb 12, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1... |
| CVE-2020-27863 | MEDIUM | 6.5 | 1.0% | Feb 12, 2021 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Li... |
| CVE-2020-27862 | HIGH | 8.8 | 1.4% | Feb 12, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2... |
| CVE-2020-27861 | HIGH | 8.8 | 2.0% | Feb 12, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi... |
| CVE-2020-27860 | HIGH | 7.8 | 3.6% | Feb 12, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35... |
| CVE-2020-9307 | MEDIUM | 6.5 | 0.6% | Feb 11, 2021 | Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attack... |
| CVE-2020-35498 | HIGH | 7.5 | 8.0% | Feb 11, 2021 | A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a mal... |
| CVE-2020-25493 | HIGH | 7.5 | 1.1% | Feb 11, 2021 | Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the netw... |
| CVE-2020-1717 | LOW | 2.7 | 0.8% | Feb 11, 2021 | A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack. |
| CVE-2020-13186 | MEDIUM | 6.5 | 0.3% | Feb 11, 2021 | An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web f... |
| CVE-2020-13185 | MEDIUM | 6.5 | 1.0% | Feb 11, 2021 | Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were acce... |
| CVE-2020-10734 | LOW | 3.3 | 0.2% | Feb 11, 2021 | A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions s... |
| CVE-2020-4768 | MEDIUM | 5.4 | 0.5% | Feb 11, 2021 | IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scri... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now