2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11453 | MEDIUM | 5.3 | 2.7% | Apr 2, 2020 | Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service functionality exposed throug... |
| CVE-2020-11452 | MEDIUM | 4.3 | 1.2% | Apr 2, 2020 | Microstrategy Web 10.4 includes functionality to allow users to import files or data from external resources such as URL... |
| CVE-2020-4325 | MEDIUM | 6.5 | 1.5% | Apr 2, 2020 | The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not pr... |
| CVE-2020-4304 | MEDIUM | 6.1 | 0.8% | Apr 2, 2020 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnera... |
| CVE-2020-4303 | MEDIUM | 6.1 | 0.8% | Apr 2, 2020 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnera... |
| CVE-2020-11454 | MEDIUM | 5.4 | 0.9% | Apr 2, 2020 | Microstrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features in the window, allowin... |
| CVE-2020-8017 | MEDIUM | 6.3 | 0.2% | Apr 2, 2020 | A Race Condition Enabling Link Following vulnerability in the cron job shipped with texlive-filesystem of SUSE Linux Ent... |
| CVE-2020-11491 | MEDIUM | 4.9 | 7.9% | Apr 2, 2020 | Monitoring::Logs in Zen Load Balancer 3.10.1 allows remote authenticated admins to conduct absolute path traversal attac... |
| CVE-2020-11458 | MEDIUM | 4.9 | 1.1% | Apr 2, 2020 | app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MIS... |
| CVE-2020-1927 | MEDIUM | 6.1 | 56.7% | Apr 2, 2020 | In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential m... |
| CVE-2020-8145 | MEDIUM | 6.5 | 1.1% | Apr 1, 2020 | The UniFi Video Server (Windows) web interface configuration restore functionality at the “backup” and “wizard” endpoint... |
| CVE-2020-1958 | MEDIUM | 6.5 | 4.6% | Apr 1, 2020 | When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials c... |
| CVE-2020-8966 | MEDIUM | 6.1 | 0.8% | Apr 1, 2020 | There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages ... |
| CVE-2020-1954 | MEDIUM | 5.3 | 6.1% | Apr 1, 2020 | Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If... |
| CVE-2020-11466 | MEDIUM | 4.3 | 1.2% | Apr 1, 2020 | An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privi... |
| CVE-2020-11464 | MEDIUM | 4.3 | 1.2% | Apr 1, 2020 | An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privil... |
| CVE-2020-10598 | MEDIUM | 6.1 | 0.3% | Apr 1, 2020 | In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment es... |
| CVE-2020-5290 | MEDIUM | 6.5 | 0.8% | Apr 1, 2020 | In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the `#token=$ssid` has... |
| CVE-2020-1934 | MEDIUM | 5.3 | 52.0% | Apr 1, 2020 | In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP serve... |
| CVE-2020-1949 | MEDIUM | 6.1 | 2.0% | Apr 1, 2020 | Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elem... |
| CVE-2020-1943 | MEDIUM | 6.1 | 97.3% | Apr 1, 2020 | Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07. |
| CVE-2020-10203 | MEDIUM | 4.8 | 0.9% | Apr 1, 2020 | Sonatype Nexus Repository before 3.21.2 allows XSS. |
| CVE-2020-9784 | MEDIUM | 4.3 | 0.8% | Apr 1, 2020 | A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use a... |
| CVE-2020-9781 | MEDIUM | 5.3 | 0.8% | Apr 1, 2020 | The issue was addressed by clearing website permission prompts after navigation. This issue is fixed in iOS 13.4 and iPa... |
| CVE-2020-9777 | MEDIUM | 5.3 | 0.8% | Apr 1, 2020 | An issue existed in the selection of video file by Mail. The issue was fixed by selecting the latest version of a video.... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now