2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12700 | MEDIUM | 4.3 | 0.8% | May 13, 2020 | The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special... |
| CVE-2020-12699 | MEDIUM | 6.1 | 0.8% | May 13, 2020 | The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl. |
| CVE-2020-12698 | MEDIUM | 4.3 | 0.8% | May 13, 2020 | The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables. |
| CVE-2020-12697 | MEDIUM | 5.3 | 1.3% | May 13, 2020 | The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries. |
| CVE-2020-11062 | MEDIUM | 5.4 | 0.5% | May 12, 2020 | In GLPI after 0.68.1 and before 9.4.6, multiple reflexive XSS occur in Dropdown endpoints due to an invalid Content-Type... |
| CVE-2020-12826 | MEDIUM | 5.3 | 0.7% | May 12, 2020 | A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in ... |
| CVE-2020-6259 | MEDIUM | 6.5 | 0.8% | May 12, 2020 | Under certain conditions SAP Adaptive Server Enterprise, versions 15.7, 16.0, allows an attacker to access information w... |
| CVE-2020-6258 | MEDIUM | 6.5 | 0.7% | May 12, 2020 | SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowin... |
| CVE-2020-6257 | MEDIUM | 5.4 | 0.5% | May 12, 2020 | SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad) 4.2 does not sufficiently encode user-control... |
| CVE-2020-6256 | MEDIUM | 4.3 | 0.6% | May 12, 2020 | SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change ... |
| CVE-2020-6254 | MEDIUM | 6.1 | 0.7% | May 12, 2020 | SAP Enterprise Threat Detection, versions 1.0, 2.0, does not sufficiently encode error response pages in case of errors,... |
| CVE-2020-6251 | MEDIUM | 6.5 | 0.8% | May 12, 2020 | Under certain conditions or error scenarios SAP Business Objects Business Intelligence Platform, version 4.2, allows an ... |
| CVE-2020-6250 | MEDIUM | 6.8 | 0.5% | May 12, 2020 | SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoint... |
| CVE-2020-6245 | MEDIUM | 6.7 | 0.3% | May 12, 2020 | SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to i... |
| CVE-2020-1746 | MEDIUM | 5 | 0.4% | May 12, 2020 | A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and... |
| CVE-2020-5898 | MEDIUM | 5.5 | 0.3% | May 12, 2020 | In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the use... |
| CVE-2020-5248 | MEDIUM | 5.3 | 1.4% | May 12, 2020 | GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used o... |
| CVE-2020-4346 | MEDIUM | 5.3 | 1.1% | May 12, 2020 | IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which can be exploited by an un... |
| CVE-2020-4195 | MEDIUM | 5.4 | 0.6% | May 12, 2020 | IBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack the clicking action of the victi... |
| CVE-2020-10706 | MEDIUM | 6.6 | 0.1% | May 12, 2020 | A flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the encryption of data at res... |
| CVE-2020-8155 | MEDIUM | 5.4 | 1.1% | May 12, 2020 | An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerab... |
| CVE-2020-10060 | MEDIUM | 6.5 | 1.6% | May 11, 2020 | In updatehub_probe, right after JSON parsing is complete, objects\[1] is accessed from the output structure in two diffe... |
| CVE-2020-10059 | MEDIUM | 4.8 | 1.2% | May 11, 2020 | The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firm... |
| CVE-2020-10023 | MEDIUM | 6.8 | 0.5% | May 11, 2020 | The shell subsystem contains a buffer overflow, whereby an adversary with physical access to the device is able to cause... |
| CVE-2020-1724 | MEDIUM | 4.3 | 0.8% | May 11, 2020 | A flaw was found in Keycloak in versions before 9.0.2. This flaw allows a malicious user that is currently logged in, to... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now