2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4815 | MEDIUM | 5.3 | 1.3% | Jan 27, 2021 | IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive information from HTTP response h... |
| CVE-2020-4628 | MEDIUM | 5.3 | 1.3% | Jan 27, 2021 | IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when... |
| CVE-2020-36012 | MEDIUM | 4.8 | 0.7% | Jan 27, 2021 | Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary ... |
| CVE-2020-23776 | HIGH | 7.5 | 0.8% | Jan 26, 2021 | A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vu... |
| CVE-2020-23774 | MEDIUM | 6.1 | 0.6% | Jan 26, 2021 | A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be execute... |
| CVE-2020-27295 | HIGH | 7.5 | 1.5% | Jan 26, 2021 | The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-serv... |
| CVE-2020-27299 | CRITICAL | 9.1 | 1.7% | Jan 26, 2021 | The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitiv... |
| CVE-2020-27297 | CRITICAL | 9.8 | 2.4% | Jan 26, 2021 | The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory wit... |
| CVE-2020-27274 | HIGH | 7.5 | 1.1% | Jan 26, 2021 | Some parsing functions in the affected product do not check the return value of malloc and the thread handling the messa... |
| CVE-2020-13582 | HIGH | 7.5 | 2.6% | Jan 26, 2021 | A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafte... |
| CVE-2020-9492 | HIGH | 8.8 | 4.4% | Jan 26, 2021 | In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO auth... |
| CVE-2020-8295 | HIGH | 7.5 | 1.8% | Jan 26, 2021 | A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password... |
| CVE-2020-8293 | MEDIUM | 6.5 | 1.6% | Jan 26, 2021 | A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in wo... |
| CVE-2020-8292 | MEDIUM | 5.4 | 0.9% | Jan 26, 2021 | Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop fun... |
| CVE-2020-8288 | MEDIUM | 5.4 | 0.8% | Jan 26, 2021 | The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability... |
| CVE-2020-6780 | MEDIUM | 4.9 | 0.6% | Jan 26, 2021 | Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 ... |
| CVE-2020-6779 | CRITICAL | 10 | 3.7% | Jan 26, 2021 | Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including ver... |
| CVE-2020-5495 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-5494 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-5493 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-5492 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-5491 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-5490 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-5489 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-5488 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now