2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11689 | MEDIUM | 6.5 | 0.6% | Apr 22, 2020 | In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the setti... |
| CVE-2020-11416 | MEDIUM | 5.4 | 0.5% | Apr 22, 2020 | JetBrains Space through 2020-04-22 allows stored XSS in Chats. |
| CVE-2020-11891 | MEDIUM | 5.3 | 0.8% | Apr 21, 2020 | An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow th... |
| CVE-2020-11890 | MEDIUM | 5.3 | 2.8% | Apr 21, 2020 | An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to ... |
| CVE-2020-11889 | MEDIUM | 5.3 | 0.8% | Apr 21, 2020 | An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow th... |
| CVE-2020-8099 | MEDIUM | 6.2 | 0.4% | Apr 21, 2020 | A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to su... |
| CVE-2020-11944 | MEDIUM | 6.1 | 1.2% | Apr 20, 2020 | Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment vari... |
| CVE-2020-9445 | MEDIUM | 6.1 | 0.7% | Apr 20, 2020 | Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality. |
| CVE-2020-9444 | MEDIUM | 6.1 | 0.7% | Apr 20, 2020 | Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality. |
| CVE-2020-9070 | MEDIUM | 5.5 | 0.6% | Apr 20, 2020 | Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulne... |
| CVE-2020-1803 | MEDIUM | 5.3 | 0.3% | Apr 20, 2020 | Huawei smartphones Honor V20 with versions earlier than 10.0.0.179(C636E3R4P3),versions earlier than 10.0.0.180(C185E3R3... |
| CVE-2020-10935 | MEDIUM | 5.4 | 0.7% | Apr 20, 2020 | Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover. |
| CVE-2020-5293 | MEDIUM | 6.5 | 0.7% | Apr 20, 2020 | In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations... |
| CVE-2020-5288 | MEDIUM | 6.5 | 0.7% | Apr 20, 2020 | "In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The p... |
| CVE-2020-5287 | MEDIUM | 6.5 | 0.7% | Apr 20, 2020 | In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is improper access control on customers search. The problem is... |
| CVE-2020-5286 | MEDIUM | 6.1 | 0.7% | Apr 20, 2020 | In PrestaShop between versions 1.7.4.0 and 1.7.6.5, there is a reflected XSS when uploading a wrong file. The problem is... |
| CVE-2020-5285 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is a reflected XSS with `back` parameter. The problem is fixed... |
| CVE-2020-5279 | MEDIUM | 6.5 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for ... |
| CVE-2020-5278 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.5.4.0 and 1.7.6.5, there is a reflected XSS on Exception page The problem is fixed in 1... |
| CVE-2020-5276 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.7.1.0 and 1.7.6.5, there is a reflected XSS on AdminCarts page with `cartBox` parameter... |
| CVE-2020-5272 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with `alias` and `search` pa... |
| CVE-2020-5271 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.6.0.0 and 1.7.6.5, there is a reflected XSS with `date_from` and `date_to` parameters i... |
| CVE-2020-5270 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is an open redirection when using back parameter. The impacts ... |
| CVE-2020-5269 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminFeatures page by using the `id_feat... |
| CVE-2020-5265 | MEDIUM | 6.1 | 0.7% | Apr 20, 2020 | In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminAttributesGroups page. The problem ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now