2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5107 | — | — | — | Jan 6, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-5106 | — | — | — | Jan 6, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-5105 | — | — | — | Jan 6, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-5104 | — | — | — | Jan 6, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-5103 | — | — | — | Jan 6, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-5102 | — | — | — | Jan 6, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-36177 | CRITICAL | 9.8 | 3.5% | Jan 6, 2021 | RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between k... |
| CVE-2020-27283 | MEDIUM | 5.3 | 0.9% | Jan 6, 2021 | An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arb... |
| CVE-2020-27279 | HIGH | 7.5 | 1.7% | Jan 6, 2021 | A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially... |
| CVE-2020-8160 | MEDIUM | 6.1 | 0.7% | Jan 6, 2021 | MendixSSO <= 2.1.1 contains endpoints that make use of the openid handler, which is suffering from a Cross-Site Scriptin... |
| CVE-2020-36176 | HIGH | 7.5 | 1.3% | Jan 6, 2021 | The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password req... |
| CVE-2020-36175 | MEDIUM | 5.3 | 1.2% | Jan 6, 2021 | The Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via the email field. |
| CVE-2020-36174 | MEDIUM | 6.5 | 0.6% | Jan 6, 2021 | The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration. |
| CVE-2020-36173 | MEDIUM | 5.3 | 1.1% | Jan 6, 2021 | The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields. |
| CVE-2020-36172 | MEDIUM | 6.1 | 0.9% | Jan 6, 2021 | The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, p... |
| CVE-2020-36171 | MEDIUM | 6.1 | 0.8% | Jan 6, 2021 | The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG uploads. |
| CVE-2020-27285 | CRITICAL | 9.1 | 0.9% | Jan 6, 2021 | The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify ... |
| CVE-2020-13545 | HIGH | 7.8 | 1.6% | Jan 6, 2021 | An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Offic... |
| CVE-2020-13544 | HIGH | 7.8 | 1.6% | Jan 6, 2021 | An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2... |
| CVE-2020-8884 | HIGH | 8.8 | 4.1% | Jan 6, 2021 | rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows re... |
| CVE-2020-36170 | MEDIUM | 5.3 | 1.1% | Jan 6, 2021 | The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms. |
| CVE-2020-10658 | CRITICAL | 9.8 | 2.7% | Jan 6, 2021 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the... |
| CVE-2020-10657 | HIGH | 7.2 | 2.5% | Jan 6, 2021 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the... |
| CVE-2020-10656 | CRITICAL | 9.8 | 2.6% | Jan 6, 2021 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the... |
| CVE-2020-10655 | CRITICAL | 9.8 | 2.6% | Jan 6, 2021 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now