2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12277 | MEDIUM | 5.3 | 0.8% | Apr 29, 2020 | GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activ... |
| CVE-2020-12276 | MEDIUM | 4.8 | 0.6% | Apr 29, 2020 | GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature. |
| CVE-2020-12275 | MEDIUM | 5.3 | 1.0% | Apr 29, 2020 | GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snipp... |
| CVE-2020-11009 | MEDIUM | 6.5 | 1.4% | Apr 29, 2020 | In Rundeck before version 3.2.6, authenticated users can craft a request that reveals Execution data and logs and Job de... |
| CVE-2020-12459 | MEDIUM | 5.5 | 0.3% | Apr 29, 2020 | In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/gra... |
| CVE-2020-12458 | MEDIUM | 5.5 | 0.5% | Apr 29, 2020 | An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database ... |
| CVE-2020-12252 | MEDIUM | 6.2 | 2.0% | Apr 29, 2020 | An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an au... |
| CVE-2020-10797 | MEDIUM | 6.1 | 2.3% | Apr 29, 2020 | An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After pass... |
| CVE-2020-7453 | MEDIUM | 6 | 0.3% | Apr 29, 2020 | In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE... |
| CVE-2020-12261 | MEDIUM | 5.4 | 2.6% | Apr 28, 2020 | Open-AudIT 3.3.0 allows an XSS attack after login. |
| CVE-2020-12438 | MEDIUM | 5.4 | 0.6% | Apr 28, 2020 | An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only securi... |
| CVE-2020-7451 | MEDIUM | 5.3 | 1.1% | Apr 28, 2020 | In FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r358740, and 11.3-RELEASE... |
| CVE-2020-12430 | MEDIUM | 6.5 | 2.3% | Apr 28, 2020 | An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A... |
| CVE-2020-9482 | MEDIUM | 6.5 | 2.6% | Apr 28, 2020 | If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Regi... |
| CVE-2020-4329 | MEDIUM | 4.3 | 1.3% | Apr 28, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenti... |
| CVE-2020-1774 | MEDIUM | 4.9 | 0.9% | Apr 28, 2020 | When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore ... |
| CVE-2020-10944 | MEDIUM | 5.4 | 0.7% | Apr 28, 2020 | HashiCorp Nomad and Nomad Enterprise up to 0.10.4 contained a cross-site scripting vulnerability such that files from a ... |
| CVE-2020-10094 | MEDIUM | 5.4 | 0.7% | Apr 28, 2020 | A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x befo... |
| CVE-2020-10093 | MEDIUM | 5.4 | 0.7% | Apr 28, 2020 | A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products. |
| CVE-2020-12286 | MEDIUM | 4.3 | 1.0% | Apr 28, 2020 | In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped to any dimension. Fo... |
| CVE-2020-5570 | MEDIUM | 5.4 | 0.8% | Apr 28, 2020 | Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated atta... |
| CVE-2020-5568 | MEDIUM | 6.1 | 0.8% | Apr 28, 2020 | Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web scrip... |
| CVE-2020-5566 | MEDIUM | 4.3 | 1.1% | Apr 28, 2020 | Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the... |
| CVE-2020-5565 | MEDIUM | 4.3 | 0.8% | Apr 28, 2020 | Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter... |
| CVE-2020-5564 | MEDIUM | 6.1 | 0.8% | Apr 28, 2020 | Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web scri... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now