2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-2174 | MEDIUM | 6.1 | 0.8% | Apr 7, 2020 | Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation out... |
| CVE-2020-2173 | MEDIUM | 5.4 | 0.7% | Apr 7, 2020 | Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports ser... |
| CVE-2020-2172 | MEDIUM | 6.5 | 1.1% | Apr 7, 2020 | Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE... |
| CVE-2020-8096 | MEDIUM | 5.3 | 0.3% | Apr 7, 2020 | Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load thi... |
| CVE-2020-11591 | MEDIUM | 5.3 | 1.0% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request a... |
| CVE-2020-11590 | MEDIUM | 5.3 | 1.0% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET requ... |
| CVE-2020-11588 | MEDIUM | 5.3 | 1.0% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET requ... |
| CVE-2020-11585 | MEDIUM | 4.3 | 0.7% | Apr 6, 2020 | There is an information disclosure issue in DNN (formerly DotNetNuke) 9.5 within the built-in Activity-Feed/Messaging/Us... |
| CVE-2020-5300 | MEDIUM | 5.3 | 1.0% | Apr 6, 2020 | In Hydra (an OAuth2 Server and OpenID Certified™ OpenID Connect Provider written in Go), before version 1.4.0+oryOS.17, ... |
| CVE-2020-11102 | MEDIUM | 5.6 | 1.9% | Apr 6, 2020 | hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not val... |
| CVE-2020-9473 | MEDIUM | 6.6 | 1.0% | Apr 6, 2020 | The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 has a passwordless ftp ssh user. By using an exploit chain, a... |
| CVE-2020-1728 | MEDIUM | 5.4 | 0.8% | Apr 6, 2020 | A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are ... |
| CVE-2020-7639 | MEDIUM | 5.3 | 1.1% | Apr 6, 2020 | eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or ... |
| CVE-2020-7638 | MEDIUM | 5.3 | 1.0% | Apr 6, 2020 | confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding ... |
| CVE-2020-7637 | MEDIUM | 5.3 | 1.2% | Apr 6, 2020 | class-transformer before 0.3.1 allow attackers to perform Prototype Pollution. The classToPlainFromExist function could ... |
| CVE-2020-11565 | MEDIUM | 6 | 0.5% | Apr 6, 2020 | An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bou... |
| CVE-2020-11547 | MEDIUM | 5.3 | 52.1% | Apr 5, 2020 | PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes runn... |
| CVE-2020-11533 | MEDIUM | 5.5 | 0.5% | Apr 4, 2020 | Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive info... |
| CVE-2020-11529 | MEDIUM | 6.1 | 10.9% | Apr 4, 2020 | Common/Grav.php in Grav before 1.7 has an Open Redirect. This is partially fixed in 1.6.23 and still present in 1.6.x. |
| CVE-2020-8143 | MEDIUM | 6.1 | 70.4% | Apr 3, 2020 | An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn14... |
| CVE-2020-8142 | MEDIUM | 6.8 | 0.6% | Apr 3, 2020 | A security restriction bypass vulnerability has been discovered in Revive Adserver version < 5.0.5 by HackerOne user hoa... |
| CVE-2020-10960 | MEDIUM | 5.3 | 1.1% | Apr 3, 2020 | In MediaWiki before 1.34.1, users can add various Cascading Style Sheets (CSS) classes (which can affect what content is... |
| CVE-2020-10689 | MEDIUM | 6.8 | 0.8% | Apr 3, 2020 | A flaw was found in the Eclipse Che up to version 7.8.x, where it did not properly restrict access to workspace pods. An... |
| CVE-2020-11499 | MEDIUM | 6.1 | 0.6% | Apr 2, 2020 | Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request... |
| CVE-2020-11494 | MEDIUM | 4.4 | 0.7% | Apr 2, 2020 | An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attacke... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now