2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11037 | MEDIUM | 4.7 | 0.3% | Apr 30, 2020 | In Wagtail before versions 2.7.3 and 2.8.2, a potential timing attack exists on pages or documents that have been protec... |
| CVE-2020-11030 | MEDIUM | 5.4 | 1.4% | Apr 30, 2020 | In affected versions of WordPress, a special payload can be crafted that can lead to scripts getting executed within the... |
| CVE-2020-11029 | MEDIUM | 6.1 | 2.1% | Apr 30, 2020 | In affected versions of WordPress, a vulnerability in the stats() method of class-wp-object-cache.php can be exploited t... |
| CVE-2020-11026 | MEDIUM | 5.4 | 2.1% | Apr 30, 2020 | In affected versions of WordPress, files with a specially crafted name when uploaded to the Media section can lead to sc... |
| CVE-2020-6867 | MEDIUM | 5.5 | 0.4% | Apr 30, 2020 | ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other... |
| CVE-2020-6866 | MEDIUM | 4.9 | 0.9% | Apr 30, 2020 | A ZTE product is impacted by a resource management error vulnerability. An attacker could exploit this vulnerability to ... |
| CVE-2020-6865 | MEDIUM | 6.5 | 0.9% | Apr 30, 2020 | ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimiz... |
| CVE-2020-5892 | MEDIUM | 6.7 | 0.3% | Apr 30, 2020 | In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attack... |
| CVE-2020-5890 | MEDIUM | 5.5 | 0.5% | Apr 30, 2020 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a Q... |
| CVE-2020-11025 | MEDIUM | 5.4 | 1.5% | Apr 30, 2020 | In affected versions of WordPress, a cross-site scripting (XSS) vulnerability in the navigation section of Customizer al... |
| CVE-2020-5889 | MEDIUM | 5.4 | 0.7% | Apr 30, 2020 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, in BIG-IP APM portal access, a specially crafted HTTP... |
| CVE-2020-11652 | MEDIUM | 6.5 | 86.1% | Apr 30, 2020 | An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla... |
| CVE-2020-10691 | MEDIUM | 5.2 | 0.4% | Apr 30, 2020 | An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy col... |
| CVE-2020-6579 | MEDIUM | 6.1 | 0.8% | Apr 30, 2020 | Cross-site scripting (XSS) vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloader_core.p... |
| CVE-2020-12101 | MEDIUM | 4.3 | 2.0% | Apr 30, 2020 | The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's st... |
| CVE-2020-9387 | MEDIUM | 4.3 | 0.7% | Apr 30, 2020 | In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for acc... |
| CVE-2020-12283 | MEDIUM | 6.1 | 1.3% | Apr 30, 2020 | Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL... |
| CVE-2020-11022 | MEDIUM | 6.1 | 99.0% | Apr 29, 2020 | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one... |
| CVE-2020-12469 | MEDIUM | 6.5 | 0.9% | Apr 29, 2020 | admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized ... |
| CVE-2020-12467 | MEDIUM | 6.5 | 0.9% | Apr 29, 2020 | Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie. |
| CVE-2020-11023 | MEDIUM | 6.1 | 83.8% | Apr 29, 2020 | In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untru... |
| CVE-2020-12472 | MEDIUM | 5.4 | 0.5% | Apr 29, 2020 | MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description. |
| CVE-2020-12465 | MEDIUM | 6.7 | 0.4% | Apr 29, 2020 | An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel be... |
| CVE-2020-12464 | MEDIUM | 6.7 | 0.8% | Apr 29, 2020 | usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occ... |
| CVE-2020-12462 | MEDIUM | 6.1 | 0.5% | Apr 29, 2020 | The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now