2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5264 | MEDIUM | 6.1 | 0.7% | Apr 20, 2020 | In PrestaShop before version 1.7.6.5, there is a reflected XSS while running the security compromised page. It allows an... |
| CVE-2020-11888 | MEDIUM | 6.1 | 1.9% | Apr 20, 2020 | python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example,... |
| CVE-2020-11930 | MEDIUM | 6.1 | 4.5% | Apr 20, 2020 | The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflan... |
| CVE-2020-11887 | MEDIUM | 6.1 | 0.7% | Apr 17, 2020 | svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document. |
| CVE-2020-5737 | MEDIUM | 5.4 | 0.6% | Apr 17, 2020 | Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitr... |
| CVE-2020-5733 | MEDIUM | 6.1 | 1.2% | Apr 17, 2020 | In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login pag... |
| CVE-2020-5732 | MEDIUM | 6.1 | 1.2% | Apr 17, 2020 | In OpenMRS 2.9 and prior, he import functionality of the Data Exchange Module does not properly redirect to a login page... |
| CVE-2020-5731 | MEDIUM | 6.1 | 1.1% | Apr 17, 2020 | In OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting. |
| CVE-2020-5730 | MEDIUM | 6.1 | 1.1% | Apr 17, 2020 | In OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross-site scripting. |
| CVE-2020-5729 | MEDIUM | 6.1 | 1.1% | Apr 17, 2020 | In OpenMRS 2.9 and prior, the UI Framework Error Page reflects arbitrary, user-supplied input back to the browser, which... |
| CVE-2020-5728 | MEDIUM | 6.1 | 1.1% | Apr 17, 2020 | OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (suc... |
| CVE-2020-11883 | MEDIUM | 5.3 | 15.2% | Apr 17, 2020 | In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpect... |
| CVE-2020-0077 | MEDIUM | 4.4 | 0.1% | Apr 17, 2020 | In authorize_enroll of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check.... |
| CVE-2020-0076 | MEDIUM | 6.7 | 0.2% | Apr 17, 2020 | In get_auth_result of the FPC IRIS TrustZone app, there is a possible out of bounds write due to a missing bounds check.... |
| CVE-2020-0075 | MEDIUM | 4.4 | 0.1% | Apr 17, 2020 | In set_shared_key of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. T... |
| CVE-2020-0068 | MEDIUM | 4.4 | 0.1% | Apr 17, 2020 | In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds read due to an integer overflow. This ... |
| CVE-2020-0067 | MEDIUM | 4.4 | 0.5% | Apr 17, 2020 | In f2fs_xattr_generic_list of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could ... |
| CVE-2020-7084 | MEDIUM | 5.5 | 0.8% | Apr 17, 2020 | A NULL pointer dereference vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of servi... |
| CVE-2020-7083 | MEDIUM | 6.5 | 1.0% | Apr 17, 2020 | An intager overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of service of t... |
| CVE-2020-11880 | MEDIUM | 6.5 | 0.9% | Apr 17, 2020 | An issue was discovered in KDE KMail before 19.12.3. By using the proprietary (non-RFC6068) "mailto?attach=..." paramete... |
| CVE-2020-11879 | MEDIUM | 6.5 | 2.7% | Apr 17, 2020 | An issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068) "mailto?attach=..." pa... |
| CVE-2020-5294 | MEDIUM | 5.4 | 0.7% | Apr 16, 2020 | PrestaShop module ps_facetedsearch versions before 2.1.0 has a reflected XSS with social networks fields The problem is ... |
| CVE-2020-5273 | MEDIUM | 5.4 | 0.7% | Apr 16, 2020 | In PrestaShop module ps_linklist versions before 3.1.0, there is a stored XSS when using custom URLs. The problem is fix... |
| CVE-2020-5266 | MEDIUM | 5.4 | 0.6% | Apr 16, 2020 | In the ps_link module for PrestaShop before version 3.1.0, there is a stored XSS when you create or edit a link list blo... |
| CVE-2020-7113 | MEDIUM | 4.9 | 0.9% | Apr 16, 2020 | A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to inte... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now