2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7011 | MEDIUM | 6.1 | 1.0% | Jun 3, 2020 | Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the ... |
| CVE-2020-3335 | MEDIUM | 5.5 | 0.3% | Jun 3, 2020 | A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attac... |
| CVE-2020-3333 | MEDIUM | 5.3 | 1.0% | Jun 3, 2020 | A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker... |
| CVE-2020-3237 | MEDIUM | 6.3 | 0.4% | Jun 3, 2020 | A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an aut... |
| CVE-2020-3233 | MEDIUM | 5.4 | 0.6% | Jun 3, 2020 | A vulnerability in the web-based Local Manager interface of the Cisco IOx Application Framework could allow an authentic... |
| CVE-2020-3231 | MEDIUM | 4.7 | 0.5% | Jun 3, 2020 | A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could ... |
| CVE-2020-3223 | MEDIUM | 4.9 | 1.9% | Jun 3, 2020 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote a... |
| CVE-2020-3222 | MEDIUM | 4.3 | 0.4% | Jun 3, 2020 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, adjace... |
| CVE-2020-3220 | MEDIUM | 6.8 | 0.5% | Jun 3, 2020 | A vulnerability in the hardware crypto driver of Cisco IOS XE Software for Cisco 4300 Series Integrated Services Routers... |
| CVE-2020-3216 | MEDIUM | 6.8 | 0.4% | Jun 3, 2020 | A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authenticati... |
| CVE-2020-3215 | MEDIUM | 6.7 | 0.3% | Jun 3, 2020 | A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker ... |
| CVE-2020-3214 | MEDIUM | 6.7 | 0.3% | Jun 3, 2020 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a ... |
| CVE-2020-3213 | MEDIUM | 6.7 | 0.4% | Jun 3, 2020 | A vulnerability in the ROMMON of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privilege... |
| CVE-2020-3210 | MEDIUM | 6.7 | 0.4% | Jun 3, 2020 | A vulnerability in the CLI parsers of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (I... |
| CVE-2020-3209 | MEDIUM | 6.8 | 0.3% | Jun 3, 2020 | A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacke... |
| CVE-2020-3208 | MEDIUM | 6.7 | 0.3% | Jun 3, 2020 | A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Serv... |
| CVE-2020-3207 | MEDIUM | 6.7 | 0.6% | Jun 3, 2020 | A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticate... |
| CVE-2020-3206 | MEDIUM | 4.7 | 0.5% | Jun 3, 2020 | A vulnerability in the handling of IEEE 802.11w Protected Management Frames (PMFs) of Cisco Catalyst 9800 Series Wireles... |
| CVE-2020-3204 | MEDIUM | 6.7 | 0.4% | Jun 3, 2020 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could all... |
| CVE-2020-3201 | MEDIUM | 6 | 0.3% | Jun 3, 2020 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could all... |
| CVE-2020-4035 | MEDIUM | 5.9 | 0.8% | Jun 3, 2020 | In WatermelonDB (NPM package "@nozbe/watermelondb") before versions 0.15.1 and 0.16.2, a maliciously crafted record ID c... |
| CVE-2020-4307 | MEDIUM | 6.5 | 0.5% | Jun 3, 2020 | IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a ... |
| CVE-2020-4190 | MEDIUM | 6.7 | 0.2% | Jun 3, 2020 | IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, whi... |
| CVE-2020-4187 | MEDIUM | 5.3 | 1.1% | Jun 3, 2020 | IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks agai... |
| CVE-2020-4182 | MEDIUM | 6.1 | 0.7% | Jun 3, 2020 | IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now