2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4236 | MEDIUM | 6.5 | 1.4% | Mar 31, 2020 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a denial of service due to... |
| CVE-2020-4235 | MEDIUM | 5.4 | 0.7% | Mar 31, 2020 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows user... |
| CVE-2020-9055 | MEDIUM | 5.4 | 0.5% | Mar 30, 2020 | Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could al... |
| CVE-2020-5289 | MEDIUM | 6.5 | 1.3% | Mar 30, 2020 | In Elide before 4.5.14, it is possible for an adversary to "guess and check" the value of a model field they do not have... |
| CVE-2020-5284 | MEDIUM | 4.3 | 43.4% | Mar 30, 2020 | Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access... |
| CVE-2020-11106 | MEDIUM | 6.1 | 0.9% | Mar 30, 2020 | An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $_SESSION... |
| CVE-2020-11104 | MEDIUM | 5.3 | 1.5% | Mar 30, 2020 | An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable i... |
| CVE-2020-5725 | MEDIUM | 5.9 | 1.7% | Mar 30, 2020 | The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpo... |
| CVE-2020-5274 | MEDIUM | 5.4 | 1.2% | Mar 30, 2020 | In Symfony before versions 5.0.5 and 4.4.5, some properties of the Exception were not properly escaped when the `ErrorHa... |
| CVE-2020-5255 | MEDIUM | 4.3 | 1.3% | Mar 30, 2020 | In Symfony before versions 4.4.7 and 5.0.7, when a `Response` does not contain a `Content-Type` header, affected version... |
| CVE-2020-7599 | MEDIUM | 6.5 | 0.5% | Mar 30, 2020 | All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log Fi... |
| CVE-2020-10560 | MEDIUM | 5.9 | 3.8% | Mar 30, 2020 | An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak crypto... |
| CVE-2020-10955 | MEDIUM | 6.5 | 1.0% | Mar 27, 2020 | GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized use... |
| CVE-2020-10952 | MEDIUM | 6.5 | 0.7% | Mar 27, 2020 | GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images. |
| CVE-2020-8552 | MEDIUM | 4.3 | 2.4% | Mar 27, 2020 | The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be v... |
| CVE-2020-8551 | MEDIUM | 6.5 | 1.1% | Mar 27, 2020 | The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a d... |
| CVE-2020-7918 | MEDIUM | 5.4 | 0.7% | Mar 27, 2020 | An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read an... |
| CVE-2020-1771 | MEDIUM | 5.4 | 0.8% | Mar 27, 2020 | Attacker is able craft an article with a link to the customer address book with malicious content (JavaScript). When age... |
| CVE-2020-1770 | MEDIUM | 4.3 | 1.3% | Mar 27, 2020 | Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue af... |
| CVE-2020-1769 | MEDIUM | 4.3 | 1.3% | Mar 27, 2020 | In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be co... |
| CVE-2020-10510 | MEDIUM | 6.5 | 1.1% | Mar 27, 2020 | Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. Afte... |
| CVE-2020-10509 | MEDIUM | 6.1 | 0.8% | Mar 27, 2020 | Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting (XSS), a... |
| CVE-2020-9468 | MEDIUM | 4.3 | 0.6% | Mar 26, 2020 | The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do n... |
| CVE-2020-9467 | MEDIUM | 5.4 | 23.8% | Mar 26, 2020 | Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function. |
| CVE-2020-9065 | MEDIUM | 5.5 | 0.2% | Mar 26, 2020 | Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerabi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now