2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1839 | MEDIUM | 6.3 | 0.2% | Jul 6, 2020 | HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition vulnerability. There is a timing... |
| CVE-2020-1838 | MEDIUM | 5.5 | 0.2% | Jul 6, 2020 | HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability. ... |
| CVE-2020-1836 | MEDIUM | 5.3 | 0.3% | Jul 6, 2020 | HUAWEI P30 with versions earlier than 10.1.0.160(C00E160R2P11) and HUAWEI P30 Pro with versions earlier than 10.1.0.160(... |
| CVE-2020-10760 | MEDIUM | 6.5 | 2.7% | Jul 6, 2020 | A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in ... |
| CVE-2020-5356 | MEDIUM | 6.5 | 1.3% | Jul 6, 2020 | Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an... |
| CVE-2020-1837 | MEDIUM | 5.3 | 0.3% | Jul 6, 2020 | ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The device... |
| CVE-2020-15570 | MEDIUM | 5.5 | 1.1% | Jul 6, 2020 | The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows... |
| CVE-2020-15569 | MEDIUM | 5.5 | 0.7% | Jul 6, 2020 | PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor. |
| CVE-2020-7691 | MEDIUM | 6.1 | 1.8% | Jul 6, 2020 | In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex. |
| CVE-2020-7690 | MEDIUM | 6.1 | 1.0% | Jul 6, 2020 | All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject Jav... |
| CVE-2020-15562 | MEDIUM | 6.1 | 2.1% | Jul 6, 2020 | An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS v... |
| CVE-2020-15538 | MEDIUM | 6.1 | 0.9% | Jul 5, 2020 | XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar. |
| CVE-2020-15537 | MEDIUM | 6.1 | 1.2% | Jul 5, 2020 | An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a product... |
| CVE-2020-15536 | MEDIUM | 6.1 | 1.2% | Jul 5, 2020 | An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can... |
| CVE-2020-15535 | MEDIUM | 6.1 | 1.2% | Jul 5, 2020 | An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur ... |
| CVE-2020-7282 | MEDIUM | 6.3 | 0.3% | Jul 3, 2020 | Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to delete files t... |
| CVE-2020-7281 | MEDIUM | 6.3 | 0.2% | Jul 3, 2020 | Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files... |
| CVE-2020-14173 | MEDIUM | 5.4 | 0.9% | Jul 3, 2020 | The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject ... |
| CVE-2020-8185 | MEDIUM | 6.5 | 2.2% | Jul 2, 2020 | A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations ... |
| CVE-2020-8179 | MEDIUM | 4.1 | 0.6% | Jul 2, 2020 | Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks. |
| CVE-2020-8176 | MEDIUM | 6.1 | 1.0% | Jul 2, 2020 | A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS pay... |
| CVE-2020-8166 | MEDIUM | 4.3 | 1.7% | Jul 2, 2020 | A CSRF forgery vulnerability exists in rails < 5.2.5, rails < 6.0.4 that makes it possible for an attacker to, given a g... |
| CVE-2020-4061 | MEDIUM | 5.4 | 0.8% | Jul 2, 2020 | In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froa... |
| CVE-2020-15091 | MEDIUM | 6.5 | 0.9% | Jul 2, 2020 | TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong bloc... |
| CVE-2020-15083 | MEDIUM | 6.1 | 0.7% | Jul 2, 2020 | In PrestaShop from version 1.7.0.0 and before version 1.7.6.6, if a target sends a corrupted file, it leads to a reflect... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now