2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7110 | MEDIUM | 4.8 | 0.6% | Apr 16, 2020 | ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administr... |
| CVE-2020-2177 | MEDIUM | 4.3 | 0.5% | Apr 16, 2020 | Jenkins Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where t... |
| CVE-2020-11823 | MEDIUM | 5.4 | 0.7% | Apr 16, 2020 | In Dolibarr 10.0.6, if USER_LOGIN_FAILED is active, there is a stored XSS vulnerability on the admin tools --> audit pag... |
| CVE-2020-11814 | MEDIUM | 5.4 | 1.0% | Apr 16, 2020 | A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users ... |
| CVE-2020-11813 | MEDIUM | 5.4 | 0.5% | Apr 16, 2020 | In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the configuration page via the copyright text input. Thus, ... |
| CVE-2020-11007 | MEDIUM | 6.5 | 0.9% | Apr 16, 2020 | In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated ... |
| CVE-2020-4338 | MEDIUM | 5.5 | 0.3% | Apr 16, 2020 | IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras... |
| CVE-2020-4260 | MEDIUM | 4.3 | 0.9% | Apr 16, 2020 | IBM UrbanCode Deploy (UCD) 7.0.5 could allow a user with special permissions to obtain sensitive information via generic... |
| CVE-2020-5721 | MEDIUM | 5.5 | 0.4% | Apr 15, 2020 | MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the ... |
| CVE-2020-3261 | MEDIUM | 6.5 | 0.5% | Apr 15, 2020 | A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated,... |
| CVE-2020-3260 | MEDIUM | 6.5 | 0.5% | Apr 15, 2020 | A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to caus... |
| CVE-2020-3252 | MEDIUM | 6.5 | 5.3% | Apr 15, 2020 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r... |
| CVE-2020-11660 | MEDIUM | 6.5 | 1.4% | Apr 15, 2020 | CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricte... |
| CVE-2020-11659 | MEDIUM | 4.3 | 0.9% | Apr 15, 2020 | CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a rest... |
| CVE-2020-11665 | MEDIUM | 6.1 | 1.6% | Apr 15, 2020 | CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attac... |
| CVE-2020-11664 | MEDIUM | 6.1 | 1.4% | Apr 15, 2020 | CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attack... |
| CVE-2020-11663 | MEDIUM | 6.1 | 1.3% | Apr 15, 2020 | CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform ... |
| CVE-2020-10951 | MEDIUM | 4.7 | 0.9% | Apr 15, 2020 | Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages. |
| CVE-2020-5346 | MEDIUM | 4.8 | 0.6% | Apr 15, 2020 | RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security... |
| CVE-2020-3954 | MEDIUM | 6.1 | 0.8% | Apr 15, 2020 | Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. |
| CVE-2020-3953 | MEDIUM | 4.8 | 0.7% | Apr 15, 2020 | Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input vali... |
| CVE-2020-11791 | MEDIUM | 6.1 | 0.6% | Apr 15, 2020 | NETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS. |
| CVE-2020-11787 | MEDIUM | 4.8 | 0.4% | Apr 15, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-6992 | MEDIUM | 6.7 | 0.4% | Apr 15, 2020 | A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and ... |
| CVE-2020-11786 | MEDIUM | 4.8 | 0.5% | Apr 15, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now