2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15011 | MEDIUM | 4.3 | 1.9% | Jun 24, 2020 | GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. |
| CVE-2020-15006 | MEDIUM | 5.4 | 0.5% | Jun 24, 2020 | Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php. |
| CVE-2020-10278 | MEDIUM | 4.6 | 1.0% | Jun 24, 2020 | The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings suc... |
| CVE-2020-10277 | MEDIUM | 6.4 | 0.4% | Jun 24, 2020 | There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of se... |
| CVE-2020-5345 | MEDIUM | 5.4 | 0.7% | Jun 23, 2020 | Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions p... |
| CVE-2020-14976 | MEDIUM | 5.5 | 0.5% | Jun 23, 2020 | GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary fi... |
| CVE-2020-14073 | MEDIUM | 5.4 | 2.9% | Jun 23, 2020 | XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can c... |
| CVE-2020-13157 | MEDIUM | 6.5 | 0.6% | Jun 23, 2020 | modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=... |
| CVE-2020-13156 | MEDIUM | 6.5 | 0.6% | Jun 23, 2020 | modules\users\admin\add_user.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=u... |
| CVE-2020-4188 | MEDIUM | 5.3 | 1.1% | Jun 23, 2020 | IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends o... |
| CVE-2020-9438 | MEDIUM | 5.9 | 0.7% | Jun 23, 2020 | Tinxy Door Lock with firmware before 3.2 allow attackers to unlock a door by replaying an Unlock request that occurred w... |
| CVE-2020-14965 | MEDIUM | 4.8 | 0.6% | Jun 23, 2020 | On TP-Link TL-WR740N v4 and TL-WR740ND v4 devices, an attacker with access to the admin panel can inject HTML code and c... |
| CVE-2020-4028 | MEDIUM | 5.3 | 0.9% | Jun 23, 2020 | Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to th... |
| CVE-2020-4033 | MEDIUM | 6.5 | 1.8% | Jun 22, 2020 | In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with session... |
| CVE-2020-4032 | MEDIUM | 4.3 | 1.8% | Jun 22, 2020 | In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients w... |
| CVE-2020-4030 | MEDIUM | 6.5 | 1.8% | Jun 22, 2020 | In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks ... |
| CVE-2020-14946 | MEDIUM | 4.3 | 7.7% | Jun 22, 2020 | downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and e... |
| CVE-2020-14943 | MEDIUM | 5.4 | 3.7% | Jun 22, 2020 | The Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are vulnerable to stored cros... |
| CVE-2020-11099 | MEDIUM | 6.5 | 2.1% | Jun 22, 2020 | In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipul... |
| CVE-2020-11098 | MEDIUM | 6.5 | 1.7% | Jun 22, 2020 | In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with... |
| CVE-2020-11097 | MEDIUM | 5.4 | 1.5% | Jun 22, 2020 | In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside o... |
| CVE-2020-11096 | MEDIUM | 6.5 | 1.8% | Jun 22, 2020 | In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one c... |
| CVE-2020-11095 | MEDIUM | 5.4 | 1.5% | Jun 22, 2020 | In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside o... |
| CVE-2020-1727 | MEDIUM | 5.4 | 0.8% | Jun 22, 2020 | A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks pro... |
| CVE-2020-14981 | MEDIUM | 5.9 | 0.8% | Jun 22, 2020 | The ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate Validation. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now