2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-2179 | HIGH | 8.8 | 2.9% | Apr 16, 2020 | Jenkins Yaml Axis Plugin 0.2.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary ... |
| CVE-2020-2178 | HIGH | 7.1 | 0.9% | Apr 16, 2020 | Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity (XX... |
| CVE-2020-11826 | HIGH | 7.5 | 0.5% | Apr 16, 2020 | Users can lock their notes with a password in Memono version 3.8. Thus, users needs to know a password to read notes. Ho... |
| CVE-2020-11825 | HIGH | 8.8 | 1.0% | Apr 16, 2020 | In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any use... |
| CVE-2020-11818 | HIGH | 8.8 | 0.8% | Apr 16, 2020 | In Rukovoditel 2.5.2 has a form_session_token value to prevent CSRF attacks. This protection mechanism can be bypassed w... |
| CVE-2020-4347 | HIGH | 7.3 | 1.8% | Apr 16, 2020 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to ... |
| CVE-2020-3651 | HIGH | 7.5 | 0.7% | Apr 16, 2020 | Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames.... |
| CVE-2020-9280 | HIGH | 7.5 | 1.7% | Apr 15, 2020 | In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the de... |
| CVE-2020-3273 | HIGH | 7.5 | 1.3% | Apr 15, 2020 | A vulnerability in the 802.11 Generic Advertisement Service (GAS) frame processing function of Cisco Wireless LAN Contro... |
| CVE-2020-3262 | HIGH | 7.5 | 1.4% | Apr 15, 2020 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol handler of Cisco Wireless LA... |
| CVE-2020-3251 | HIGH | 8.8 | 61.5% | Apr 15, 2020 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r... |
| CVE-2020-3249 | HIGH | 7.5 | 23.1% | Apr 15, 2020 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r... |
| CVE-2020-3240 | HIGH | 7.3 | 38.7% | Apr 15, 2020 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r... |
| CVE-2020-3239 | HIGH | 8.8 | 73.6% | Apr 15, 2020 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r... |
| CVE-2020-3194 | HIGH | 7.8 | 1.9% | Apr 15, 2020 | A vulnerability in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windo... |
| CVE-2020-3177 | HIGH | 7.5 | 2.8% | Apr 15, 2020 | A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and ... |
| CVE-2020-3162 | HIGH | 7.5 | 1.7% | Apr 15, 2020 | A vulnerability in the Constrained Application Protocol (CoAP) implementation of Cisco IoT Field Network Director could ... |
| CVE-2020-1632 | HIGH | 8.6 | 1.1% | Apr 15, 2020 | In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evol... |
| CVE-2020-11666 | HIGH | 8.8 | 3.0% | Apr 15, 2020 | CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privile... |
| CVE-2020-11662 | HIGH | 7.5 | 3.2% | Apr 15, 2020 | CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-... |
| CVE-2020-11661 | HIGH | 8.1 | 1.9% | Apr 15, 2020 | CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit ... |
| CVE-2020-10615 | HIGH | 7.5 | 2.6% | Apr 15, 2020 | Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers caus... |
| CVE-2020-10613 | HIGH | 7.5 | 2.5% | Apr 15, 2020 | Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to d... |
| CVE-2020-5350 | HIGH | 7.2 | 2.0% | Apr 15, 2020 | Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability... |
| CVE-2020-11792 | HIGH | 7.5 | 0.7% | Apr 15, 2020 | NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certifi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now