2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35774 | MEDIUM | 5.4 | 87.4% | Dec 29, 2020 | server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configu... |
| CVE-2020-35773 | HIGH | 8.8 | 1.0% | Dec 29, 2020 | The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF. |
| CVE-2020-28283 | CRITICAL | 9.8 | 3.2% | Dec 29, 2020 | Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of se... |
| CVE-2020-28282 | CRITICAL | 9.8 | 4.0% | Dec 29, 2020 | Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may l... |
| CVE-2020-28281 | CRITICAL | 9.8 | 3.6% | Dec 29, 2020 | Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denia... |
| CVE-2020-28280 | CRITICAL | 9.8 | 2.9% | Dec 29, 2020 | Prototype pollution vulnerability in 'predefine' versions 0.0.0 through 0.1.2 allows an attacker to cause a denial of se... |
| CVE-2020-28279 | CRITICAL | 9.8 | 3.0% | Dec 29, 2020 | Prototype pollution vulnerability in 'flattenizer' versions 0.0.5 through 1.0.5 allows an attacker to cause a denial of ... |
| CVE-2020-28278 | CRITICAL | 9.8 | 2.9% | Dec 29, 2020 | Prototype pollution vulnerability in 'shvl' versions 1.0.0 through 2.0.1 allows an attacker to cause a denial of service... |
| CVE-2020-1848 | MEDIUM | 5.5 | 0.2% | Dec 29, 2020 | There is a resource management error vulnerability in Jackman-AL00D versions 8.2.0.185(C00R2P1). Local attackers constru... |
| CVE-2020-29471 | MEDIUM | 4.8 | 1.3% | Dec 29, 2020 | OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as ... |
| CVE-2020-29470 | MEDIUM | 4.8 | 1.7% | Dec 29, 2020 | OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Subject field of mail. This vulnerability can allow an... |
| CVE-2020-28277 | CRITICAL | 9.8 | 2.9% | Dec 29, 2020 | Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service an... |
| CVE-2020-28276 | CRITICAL | 9.8 | 2.9% | Dec 29, 2020 | Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of servic... |
| CVE-2020-28275 | — | — | — | Dec 29, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-5807 | HIGH | 7.5 | 33.8% | Dec 29, 2020 | An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the Factor... |
| CVE-2020-5806 | MEDIUM | 5.5 | 4.8% | Dec 29, 2020 | An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseL... |
| CVE-2020-5802 | HIGH | 7.5 | 38.8% | Dec 29, 2020 | An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a special... |
| CVE-2020-5801 | HIGH | 7.5 | 25.2% | Dec 29, 2020 | An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled ex... |
| CVE-2020-29475 | MEDIUM | 4.8 | 1.1% | Dec 29, 2020 | nopCommerce Store 4.30 is affected by cross-site scripting (XSS) in the Schedule tasks name field. This vulnerability ca... |
| CVE-2020-17533 | HIGH | 8.1 | 3.7% | Dec 29, 2020 | Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy en... |
| CVE-2020-25847 | HIGH | 8.8 | 2.5% | Dec 29, 2020 | This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP h... |
| CVE-2020-35769 | CRITICAL | 9.8 | 1.7% | Dec 29, 2020 | miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program. |
| CVE-2020-26287 | HIGH | 8.7 | 1.4% | Dec 29, 2020 | HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an attacker can ... |
| CVE-2020-26286 | HIGH | 7.5 | 1.4% | Dec 29, 2020 | HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an unauthenticat... |
| CVE-2020-13476 | MEDIUM | 4.8 | 0.7% | Dec 28, 2020 | NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now