2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9461 | MEDIUM | 5.4 | 1.3% | Apr 14, 2020 | Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFo... |
| CVE-2020-9460 | MEDIUM | 5.4 | 1.3% | Apr 14, 2020 | Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vuln... |
| CVE-2020-4151 | MEDIUM | 6.5 | 1.1% | Apr 14, 2020 | IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to imprope... |
| CVE-2020-11743 | MEDIUM | 5.5 | 0.5% | Apr 14, 2020 | An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad err... |
| CVE-2020-11742 | MEDIUM | 5.5 | 0.4% | Apr 14, 2020 | An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad conti... |
| CVE-2020-11740 | MEDIUM | 5.5 | 0.4% | Apr 14, 2020 | An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain ... |
| CVE-2020-1730 | MEDIUM | 5.3 | 3.1% | Apr 13, 2020 | A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabl... |
| CVE-2020-6456 | MEDIUM | 6.5 | 1.4% | Apr 13, 2020 | Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attacker ... |
| CVE-2020-6446 | MEDIUM | 6.5 | 1.6% | Apr 13, 2020 | Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to byp... |
| CVE-2020-6445 | MEDIUM | 6.5 | 1.9% | Apr 13, 2020 | Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to byp... |
| CVE-2020-6444 | MEDIUM | 6.3 | 1.4% | Apr 13, 2020 | Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap... |
| CVE-2020-6442 | MEDIUM | 4.3 | 1.9% | Apr 13, 2020 | Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-ori... |
| CVE-2020-6441 | MEDIUM | 4.3 | 1.7% | Apr 13, 2020 | Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass se... |
| CVE-2020-6440 | MEDIUM | 4.3 | 1.2% | Apr 13, 2020 | Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a us... |
| CVE-2020-6438 | MEDIUM | 4.3 | 1.3% | Apr 13, 2020 | Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a... |
| CVE-2020-6437 | MEDIUM | 4.3 | 1.7% | Apr 13, 2020 | Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof securi... |
| CVE-2020-6435 | MEDIUM | 4.3 | 1.6% | Apr 13, 2020 | Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had c... |
| CVE-2020-6433 | MEDIUM | 4.3 | 1.6% | Apr 13, 2020 | Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass... |
| CVE-2020-6432 | MEDIUM | 4.3 | 1.7% | Apr 13, 2020 | Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypas... |
| CVE-2020-6431 | MEDIUM | 4.3 | 1.5% | Apr 13, 2020 | Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof... |
| CVE-2020-11734 | MEDIUM | 6.1 | 1.0% | Apr 13, 2020 | cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter. |
| CVE-2020-8430 | MEDIUM | 6.1 | 0.9% | Apr 13, 2020 | Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive ... |
| CVE-2020-8148 | MEDIUM | 5.3 | 1.0% | Apr 13, 2020 | UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostnam... |
| CVE-2020-1759 | MEDIUM | 6.8 | 1.4% | Apr 13, 2020 | A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vul... |
| CVE-2020-11731 | MEDIUM | 6.1 | 1.2% | Apr 13, 2020 | The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/M... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now