2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6664 | — | — | — | Jan 12, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-6663 | — | — | — | Jan 12, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-6662 | — | — | — | Jan 12, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-6661 | — | — | — | Jan 12, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-6660 | — | — | — | Jan 12, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-4079 | HIGH | 7.7 | 0.9% | Jan 12, 2021 | Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 2.8.0, when the ajax endpoint ... |
| CVE-2020-36190 | MEDIUM | 6.1 | 1.3% | Jan 12, 2021 | RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms. |
| CVE-2020-13116 | MEDIUM | 5.4 | 0.5% | Jan 12, 2021 | OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation. |
| CVE-2020-27148 | HIGH | 7.1 | 1.1% | Jan 12, 2021 | The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of... |
| CVE-2020-4838 | MEDIUM | 5.4 | 0.6% | Jan 12, 2021 | IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting. This vulnerability allows users t... |
| CVE-2020-4674 | MEDIUM | 4.3 | 0.8% | Jan 12, 2021 | IBM Workload Automation 9.5 stores the server path in URLs that could aid in further attacks against the system. IBM X-F... |
| CVE-2020-4673 | MEDIUM | 4.3 | 0.8% | Jan 12, 2021 | IBM Workload Automation 9.5 stores sensitive information in HTML comments that could aid in further attacks against the ... |
| CVE-2020-35459 | HIGH | 7.8 | 0.7% | Jan 12, 2021 | An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is ru... |
| CVE-2020-35458 | CRITICAL | 9.8 | 5.3% | Jan 12, 2021 | An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk... |
| CVE-2020-26713 | MEDIUM | 6.1 | 1.2% | Jan 12, 2021 | REDCap 10.3.4 contains a XSS vulnerability in the ToDoList function with parameter sort. The information submitted by th... |
| CVE-2020-26712 | CRITICAL | 9.8 | 2.1% | Jan 12, 2021 | REDCap 10.3.4 contains a SQL injection vulnerability in the ToDoList function via sort parameter. The application uses t... |
| CVE-2020-25657 | MEDIUM | 5.9 | 1.7% | Jan 12, 2021 | A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the... |
| CVE-2020-14341 | LOW | 2.7 | 0.9% | Jan 12, 2021 | The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user ... |
| CVE-2020-14275 | CRITICAL | 9.8 | 1.4% | Jan 12, 2021 | Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could al... |
| CVE-2020-14274 | HIGH | 7.5 | 1.3% | Jan 12, 2021 | Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote... |
| CVE-2020-35655 | MEDIUM | 5.4 | 1.5% | Jan 12, 2021 | In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because off... |
| CVE-2020-35654 | HIGH | 8.8 | 1.8% | Jan 12, 2021 | In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain... |
| CVE-2020-35653 | HIGH | 7.1 | 1.5% | Jan 12, 2021 | In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stri... |
| CVE-2020-24701 | MEDIUM | 6.1 | 6.8% | Jan 12, 2021 | OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI). |
| CVE-2020-24700 | MEDIUM | 5.4 | 1.2% | Jan 12, 2021 | OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconf... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now