2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13474 | MEDIUM | 6.5 | 0.7% | Dec 28, 2020 | In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-p... |
| CVE-2020-13473 | MEDIUM | 5.5 | 0.3% | Dec 28, 2020 | NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration... |
| CVE-2020-27172 | CRITICAL | 9.8 | 1.3% | Dec 28, 2020 | An issue was discovered in G-Data before 25.5.9.25 using Symbolic links, it is possible to abuse the infected-file resto... |
| CVE-2020-35766 | HIGH | 7.8 | 0.5% | Dec 28, 2020 | The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack agai... |
| CVE-2020-35730 | MEDIUM | 6.1 | 32.4% | Dec 28, 2020 | An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attack... |
| CVE-2020-35616 | HIGH | 7.5 | 6.1% | Dec 28, 2020 | An issue was discovered in Joomla! 1.7.0 through 3.9.22. Lack of input validation while handling ACL rulesets can cause ... |
| CVE-2020-35615 | MEDIUM | 6.3 | 0.4% | Dec 28, 2020 | An issue was discovered in Joomla! 2.5.0 through 3.9.22. A missing token check in the emailexport feature of com_privacy... |
| CVE-2020-35614 | MEDIUM | 5.3 | 1.1% | Dec 28, 2020 | An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration a... |
| CVE-2020-35613 | CRITICAL | 9.8 | 28.4% | Dec 28, 2020 | An issue was discovered in Joomla! 3.0.0 through 3.9.22. Improper filter blacklist configuration leads to a SQL injectio... |
| CVE-2020-35612 | HIGH | 7.5 | 1.6% | Dec 28, 2020 | An issue was discovered in Joomla! 2.5.0 through 3.9.22. The folder parameter of mod_random_image lacked input validatio... |
| CVE-2020-35611 | HIGH | 7.5 | 1.3% | Dec 28, 2020 | An issue was discovered in Joomla! 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the... |
| CVE-2020-35610 | HIGH | 7.5 | 1.3% | Dec 28, 2020 | An issue was discovered in Joomla! 2.5.0 through 3.9.22. The autosuggestion feature of com_finder did not respect the ac... |
| CVE-2020-26290 | CRITICAL | 9.6 | 1.0% | Dec 28, 2020 | Dex is a federated OpenID Connect provider written in Go. In Dex before version 2.27.0 there is a critical set of vulner... |
| CVE-2020-25507 | HIGH | 7.8 | 0.5% | Dec 28, 2020 | An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivi... |
| CVE-2020-14273 | HIGH | 7.5 | 1.2% | Dec 28, 2020 | HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its publ... |
| CVE-2020-27837 | MEDIUM | 6.4 | 0.2% | Dec 28, 2020 | A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it pos... |
| CVE-2020-26289 | HIGH | 7.5 | 2.1% | Dec 28, 2020 | date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular ... |
| CVE-2020-24360 | HIGH | 7.4 | 0.7% | Dec 28, 2020 | An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issu... |
| CVE-2020-15898 | MEDIUM | 5.3 | 1.0% | Dec 28, 2020 | In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability... |
| CVE-2020-26569 | MEDIUM | 5.9 | 0.8% | Dec 28, 2020 | In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result ... |
| CVE-2020-35627 | HIGH | 8.8 | 2.0% | Dec 28, 2020 | Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that ca... |
| CVE-2020-29245 | MEDIUM | 6.5 | 1.1% | Dec 28, 2020 | dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData. |
| CVE-2020-29244 | MEDIUM | 6.5 | 1.1% | Dec 28, 2020 | dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readTextWithDescrFrame. |
| CVE-2020-29243 | MEDIUM | 6.5 | 1.1% | Dec 28, 2020 | dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame. |
| CVE-2020-29242 | MEDIUM | 6.5 | 1.1% | Dec 28, 2020 | dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now