2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15047 | MEDIUM | 5.9 | 0.8% | Jun 25, 2020 | MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows man-in-the-middle attackers to ... |
| CVE-2020-5965 | MEDIUM | 5.5 | 0.3% | Jun 25, 2020 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x... |
| CVE-2020-15041 | MEDIUM | 4.8 | 0.5% | Jun 24, 2020 | PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Add Site Link field. |
| CVE-2020-15038 | MEDIUM | 5.4 | 3.8% | Jun 24, 2020 | The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS. |
| CVE-2020-15026 | MEDIUM | 4.9 | 1.3% | Jun 24, 2020 | Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file do... |
| CVE-2020-15025 | MEDIUM | 4.9 | 3.4% | Jun 24, 2020 | ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory ... |
| CVE-2020-13248 | MEDIUM | 5.4 | 0.6% | Jun 24, 2020 | BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON ... |
| CVE-2020-15015 | MEDIUM | 6.1 | 0.7% | Jun 24, 2020 | The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document. |
| CVE-2020-14018 | MEDIUM | 6.1 | 0.9% | Jun 24, 2020 | An issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is executed on the page to v... |
| CVE-2020-14016 | MEDIUM | 5.3 | 1.6% | Jun 24, 2020 | An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by ... |
| CVE-2020-14014 | MEDIUM | 5.4 | 0.6% | Jun 24, 2020 | An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not... |
| CVE-2020-13483 | MEDIUM | 6.1 | 4.5% | Jun 24, 2020 | The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID] parameter to the components/... |
| CVE-2020-4413 | MEDIUM | 5.9 | 1.2% | Jun 24, 2020 | IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to ... |
| CVE-2020-4342 | MEDIUM | 5.3 | 1.1% | Jun 24, 2020 | IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized u... |
| CVE-2020-4341 | MEDIUM | 5.3 | 1.4% | Jun 24, 2020 | IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical ... |
| CVE-2020-4327 | MEDIUM | 5.3 | 1.1% | Jun 24, 2020 | IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical ... |
| CVE-2020-4323 | MEDIUM | 6.1 | 0.7% | Jun 24, 2020 | IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar... |
| CVE-2020-4322 | MEDIUM | 4.3 | 1.0% | Jun 24, 2020 | IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading... |
| CVE-2020-14007 | MEDIUM | 5.4 | 1.1% | Jun 24, 2020 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an a... |
| CVE-2020-14006 | MEDIUM | 5.4 | 1.1% | Jun 24, 2020 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible ... |
| CVE-2020-15018 | MEDIUM | 6.5 | 0.9% | Jun 24, 2020 | playSMS through 1.4.3 is vulnerable to session fixation. |
| CVE-2020-12866 | MEDIUM | 5.7 | 1.0% | Jun 24, 2020 | A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network ... |
| CVE-2020-12864 | MEDIUM | 4.3 | 1.2% | Jun 24, 2020 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as... |
| CVE-2020-12863 | MEDIUM | 4.3 | 1.0% | Jun 24, 2020 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as... |
| CVE-2020-12862 | MEDIUM | 4.3 | 1.1% | Jun 24, 2020 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now