2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11053 | MEDIUM | 6.1 | 0.8% | May 7, 2020 | In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Users can provide a redirect address for the prox... |
| CVE-2020-4430 | MEDIUM | 4.3 | 68.5% | May 7, 2020 | IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories... |
| CVE-2020-12708 | MEDIUM | 6.1 | 0.9% | May 7, 2020 | Multiple cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web scrip... |
| CVE-2020-12707 | MEDIUM | 6.1 | 1.2% | May 7, 2020 | An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited because the only secur... |
| CVE-2020-12706 | MEDIUM | 5.4 | 2.9% | May 7, 2020 | Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web scrip... |
| CVE-2020-12705 | MEDIUM | 6.1 | 0.6% | May 7, 2020 | Multiple cross-site scripting (XSS) vulnerabilities exist in LeptonCMS before 4.6.0. |
| CVE-2020-12704 | MEDIUM | 6.1 | 1.2% | May 7, 2020 | UliCMS before 2020.2 has PageController stored XSS. |
| CVE-2020-12703 | MEDIUM | 6.1 | 0.6% | May 7, 2020 | UliCMS before 2020.2 has XSS during PackageController uninstall. |
| CVE-2020-11047 | MEDIUM | 5.9 | 1.7% | May 7, 2020 | In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bounds read in autodetect_recv_bandwidth_measure_results. A ma... |
| CVE-2020-11042 | MEDIUM | 5.9 | 1.8% | May 7, 2020 | In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. It allows reading... |
| CVE-2020-5751 | MEDIUM | 5.4 | 0.7% | May 7, 2020 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-si... |
| CVE-2020-5750 | MEDIUM | 6.1 | 1.1% | May 7, 2020 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-... |
| CVE-2020-5749 | MEDIUM | 5.4 | 0.7% | May 7, 2020 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-si... |
| CVE-2020-5748 | MEDIUM | 6.1 | 1.1% | May 7, 2020 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-... |
| CVE-2020-5747 | MEDIUM | 5.4 | 0.7% | May 7, 2020 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-si... |
| CVE-2020-5746 | MEDIUM | 5.4 | 0.7% | May 7, 2020 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-si... |
| CVE-2020-5744 | MEDIUM | 4.9 | 1.4% | May 7, 2020 | Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files... |
| CVE-2020-5743 | MEDIUM | 4.3 | 0.8% | May 7, 2020 | Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadat... |
| CVE-2020-12679 | MEDIUM | 6.1 | 0.8% | May 7, 2020 | A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 befor... |
| CVE-2020-12448 | MEDIUM | 5.3 | 1.2% | May 7, 2020 | GitLab EE 12.8 and later allows Exposure of Sensitive Information to an Unauthorized Actor via NuGet. |
| CVE-2020-12687 | MEDIUM | 6.5 | 1.0% | May 7, 2020 | An issue was discovered in Serpico before 1.3.3. The /admin/attacments_backup endpoint can be requested by non-admin aut... |
| CVE-2020-12683 | MEDIUM | 5.4 | 0.6% | May 7, 2020 | Katyshop2 before 2.12 has multiple stored XSS issues. |
| CVE-2020-12696 | MEDIUM | 6.1 | 2.0% | May 7, 2020 | The iframe plugin before 4.5 for WordPress does not sanitize a URL. |
| CVE-2020-12692 | MEDIUM | 5.4 | 0.7% | May 7, 2020 | An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check ... |
| CVE-2020-11727 | MEDIUM | 6.1 | 2.0% | May 6, 2020 | A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordP... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now