2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5563 | MEDIUM | 5.3 | 1.2% | Apr 28, 2020 | Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the aff... |
| CVE-2020-5562 | MEDIUM | 4.9 | 0.9% | Apr 28, 2020 | Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an admini... |
| CVE-2020-1722 | MEDIUM | 5.3 | 1.0% | Apr 27, 2020 | A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to... |
| CVE-2020-1880 | MEDIUM | 5.5 | 0.5% | Apr 27, 2020 | Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205(C00E202R7P2) have a denial of service vulnerability. ... |
| CVE-2020-9072 | MEDIUM | 6.7 | 0.2% | Apr 27, 2020 | Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authe... |
| CVE-2020-1845 | MEDIUM | 6.7 | 0.2% | Apr 27, 2020 | Huawei PCManager product with versions earlier than 10.0.5.53 have a local privilege escalation vulnerability. An authen... |
| CVE-2020-11822 | MEDIUM | 6.1 | 0.8% | Apr 27, 2020 | In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure --> user access groups page. Thus... |
| CVE-2020-11821 | MEDIUM | 5.3 | 1.1% | Apr 27, 2020 | In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hash... |
| CVE-2020-11415 | MEDIUM | 4.9 | 0.6% | Apr 27, 2020 | An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can r... |
| CVE-2020-9489 | MEDIUM | 5.5 | 2.5% | Apr 27, 2020 | A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can a... |
| CVE-2020-12272 | MEDIUM | 5.3 | 2.1% | Apr 27, 2020 | OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about t... |
| CVE-2020-11420 | MEDIUM | 6.5 | 1.6% | Apr 27, 2020 | UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exp... |
| CVE-2020-12052 | MEDIUM | 6.1 | 1.3% | Apr 27, 2020 | Grafana version < 6.7.3 is vulnerable for annotation popup XSS. |
| CVE-2020-10997 | MEDIUM | 6.5 | 1.0% | Apr 27, 2020 | Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may i... |
| CVE-2020-12270 | MEDIUM | 6.5 | 1.4% | Apr 27, 2020 | React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote... |
| CVE-2020-6213 | MEDIUM | 6.1 | 0.8% | Apr 24, 2020 | SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750,... |
| CVE-2020-6212 | MEDIUM | 5.4 | 0.7% | Apr 24, 2020 | Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (version... |
| CVE-2020-12245 | MEDIUM | 6.1 | 1.9% | Apr 24, 2020 | Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip. |
| CVE-2020-11013 | MEDIUM | 5 | 1.3% | Apr 24, 2020 | Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0. `lookup` is a Helm... |
| CVE-2020-7134 | MEDIUM | 6.5 | 0.9% | Apr 24, 2020 | A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2... |
| CVE-2020-1741 | MEDIUM | 5.9 | 0.9% | Apr 24, 2020 | A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified... |
| CVE-2020-6827 | MEDIUM | 4.7 | 0.7% | Apr 24, 2020 | When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could... |
| CVE-2020-4267 | MEDIUM | 6.5 | 1.3% | Apr 24, 2020 | IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a me... |
| CVE-2020-12137 | MEDIUM | 6.1 | 2.3% | Apr 24, 2020 | GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior ma... |
| CVE-2020-12063 | MEDIUM | 5.3 | 0.9% | Apr 24, 2020 | A certain Postfix 2.10.1-7 package could allow an attacker to send an email from an arbitrary-looking sender via a homog... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now