2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4259 | MEDIUM | 6.5 | 0.8% | May 14, 2020 | IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information ... |
| CVE-2020-1945 | MEDIUM | 6.3 | 1.8% | May 14, 2020 | Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system propert... |
| CVE-2020-12717 | MEDIUM | 6.5 | 1.4% | May 14, 2020 | The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere ... |
| CVE-2020-5575 | MEDIUM | 6.1 | 0.9% | May 14, 2020 | Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), M... |
| CVE-2020-5574 | MEDIUM | 5.3 | 1.2% | May 14, 2020 | HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable ... |
| CVE-2020-5409 | MEDIUM | 6.1 | 0.9% | May 14, 2020 | Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unau... |
| CVE-2020-11065 | MEDIUM | 5.4 | 0.5% | May 13, 2020 | In TYPO3 CMS greater than or equal to 9.5.12 and less than 9.5.17, and greater than or equal to 10.2.0 and less than 10.... |
| CVE-2020-11064 | MEDIUM | 5.4 | 0.5% | May 13, 2020 | In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.... |
| CVE-2020-2017 | MEDIUM | 6.1 | 0.8% | May 13, 2020 | A DOM-Based Cross Site Scripting Vulnerability exists in PAN-OS and Panorama Management Web Interfaces. A remote attacke... |
| CVE-2020-2005 | MEDIUM | 6.1 | 0.8% | May 13, 2020 | A cross-site scripting (XSS) vulnerability exists when visiting malicious websites with the Palo Alto Networks GlobalPro... |
| CVE-2020-2004 | MEDIUM | 5.5 | 0.3% | May 13, 2020 | Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are... |
| CVE-2020-2003 | MEDIUM | 6.5 | 0.9% | May 13, 2020 | An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator ... |
| CVE-2020-1997 | MEDIUM | 6.1 | 0.9% | May 13, 2020 | An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to spec... |
| CVE-2020-1996 | MEDIUM | 5.3 | 0.9% | May 13, 2020 | A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthentica... |
| CVE-2020-1995 | MEDIUM | 4.9 | 1.1% | May 13, 2020 | A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a re... |
| CVE-2020-1994 | MEDIUM | 4.4 | 0.2% | May 13, 2020 | A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbi... |
| CVE-2020-1993 | MEDIUM | 5.4 | 0.4% | May 13, 2020 | The GlobalProtect Portal feature in PAN-OS does not set a new session identifier after a successful user login, which al... |
| CVE-2020-11070 | MEDIUM | 5.4 | 0.5% | May 13, 2020 | The SVG Sanitizer extension for TYPO3 has a cross-site scripting vulnerability in versions before 1.0.3. Slightly invali... |
| CVE-2020-12831 | MEDIUM | 5.3 | 1.4% | May 13, 2020 | An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, th... |
| CVE-2020-9501 | MEDIUM | 5.5 | 0.3% | May 13, 2020 | Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authent... |
| CVE-2020-7455 | MEDIUM | 5.5 | 0.5% | May 13, 2020 | In FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4-BETA1 before p1 and 11.3... |
| CVE-2020-5838 | MEDIUM | 4.8 | 0.7% | May 13, 2020 | Symantec IT Analytics, prior to 2.9.1, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of is... |
| CVE-2020-8020 | MEDIUM | 6.1 | 0.9% | May 13, 2020 | A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attacker... |
| CVE-2020-4312 | MEDIUM | 4.3 | 0.8% | May 13, 2020 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 trough 6.0.3.1 could allow an authenticated user to obtain sensitiv... |
| CVE-2020-12742 | MEDIUM | 6.1 | 1.1% | May 13, 2020 | The iubenda-cookie-law-solution plugin before 2.3.5 for WordPress does not restrict URL sanitization to http protocols. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now