2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4284 | MEDIUM | 5.3 | 1.3% | Apr 8, 2020 | IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information ... |
| CVE-2020-4282 | MEDIUM | 4.3 | 0.8% | Apr 8, 2020 | IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow an authenticated user to ... |
| CVE-2020-4252 | MEDIUM | 5.4 | 0.7% | Apr 8, 2020 | IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability a... |
| CVE-2020-5736 | MEDIUM | 6.5 | 1.6% | Apr 8, 2020 | Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An authenticated remote attacker c... |
| CVE-2020-10633 | MEDIUM | 6.1 | 0.7% | Apr 8, 2020 | A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to ... |
| CVE-2020-11631 | MEDIUM | 6.5 | 1.1% | Apr 8, 2020 | An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. An error state can be generated in the CA UI by... |
| CVE-2020-11628 | MEDIUM | 5.3 | 0.9% | Apr 8, 2020 | An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. It is intended to support restriction of availa... |
| CVE-2020-11626 | MEDIUM | 6.1 | 0.4% | Apr 8, 2020 | An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. Two Cross Side Scripting (XSS) vulnerabilities ... |
| CVE-2020-9286 | MEDIUM | 6.5 | 1.2% | Apr 7, 2020 | An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform... |
| CVE-2020-6647 | MEDIUM | 5.4 | 0.6% | Apr 7, 2020 | An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to pe... |
| CVE-2020-11509 | MEDIUM | 6.1 | 1.9% | Apr 7, 2020 | An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page temp... |
| CVE-2020-11508 | MEDIUM | 5.4 | 0.8% | Apr 7, 2020 | An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permiss... |
| CVE-2020-11611 | MEDIUM | 6.1 | 0.9% | Apr 7, 2020 | An issue was discovered in xdLocalStorage through 2.0.5. The buildMessage() function in xdLocalStorage.js specifies the ... |
| CVE-2020-9514 | MEDIUM | 6.5 | 1.0% | Apr 7, 2020 | An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in... |
| CVE-2020-11609 | MEDIUM | 4.3 | 0.6% | Apr 7, 2020 | An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06... |
| CVE-2020-11516 | MEDIUM | 5.4 | 0.7% | Apr 7, 2020 | Stored XSS in the Contact Form 7 Datepicker plugin through 2.6.0 for WordPress allows authenticated attackers with minim... |
| CVE-2020-11515 | MEDIUM | 6.1 | 2.1% | Apr 7, 2020 | The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that red... |
| CVE-2020-11512 | MEDIUM | 5.4 | 0.7% | Apr 7, 2020 | Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attackers with minimal (subs... |
| CVE-2020-5302 | MEDIUM | 6.5 | 0.9% | Apr 7, 2020 | MH-WikiBot (an IRC Bot for interacting with the Miraheze API), had a bug that allowed any unprivileged user to access th... |
| CVE-2020-7618 | MEDIUM | 5.3 | 1.1% | Apr 7, 2020 | sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties ... |
| CVE-2020-7616 | MEDIUM | 5.3 | 1.2% | Apr 7, 2020 | express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution. Exported functions by the package can be tri... |
| CVE-2020-11608 | MEDIUM | 4.3 | 0.5% | Apr 7, 2020 | An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferenc... |
| CVE-2020-6171 | MEDIUM | 6.1 | 4.8% | Apr 7, 2020 | A cross-site scripting (XSS) vulnerability in the index page of the CLink Office 2.0 management console allows remote at... |
| CVE-2020-2176 | MEDIUM | 5.4 | 0.7% | Apr 7, 2020 | Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from ... |
| CVE-2020-2175 | MEDIUM | 5.4 | 0.7% | Apr 7, 2020 | Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now