2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6999 | MEDIUM | 6.5 | 1.0% | Mar 26, 2020 | In Moxa EDS-G516E Series firmware, Version 5.2 or lower, some of the parameters in the setting pages do not ensure text ... |
| CVE-2020-5340 | MEDIUM | 4.8 | 0.7% | Mar 26, 2020 | RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security... |
| CVE-2020-5339 | MEDIUM | 4.8 | 0.7% | Mar 26, 2020 | RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security... |
| CVE-2020-8923 | MEDIUM | 6.1 | 0.3% | Mar 26, 2020 | An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an atta... |
| CVE-2020-8910 | MEDIUM | 6.5 | 0.5% | Mar 26, 2020 | A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker ... |
| CVE-2020-10966 | MEDIUM | 6.5 | 1.9% | Mar 25, 2020 | In the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel before 1.1.1, Host header ... |
| CVE-2020-6813 | MEDIUM | 5.3 | 1.2% | Mar 25, 2020 | When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in the CSS block cou... |
| CVE-2020-6812 | MEDIUM | 5.3 | 1.6% | Mar 25, 2020 | The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's A... |
| CVE-2020-6810 | MEDIUM | 4.3 | 1.0% | Mar 25, 2020 | After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification th... |
| CVE-2020-6808 | MEDIUM | 6.5 | 1.0% | Mar 25, 2020 | When a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to create an HTML doc... |
| CVE-2020-9520 | MEDIUM | 5.4 | 0.8% | Mar 25, 2020 | A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerabil... |
| CVE-2020-3791 | MEDIUM | 4.3 | 2.2% | Mar 25, 2020 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds ... |
| CVE-2020-3782 | MEDIUM | 4.3 | 2.2% | Mar 25, 2020 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds ... |
| CVE-2020-3781 | MEDIUM | 4.3 | 2.2% | Mar 25, 2020 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds ... |
| CVE-2020-3778 | MEDIUM | 4.3 | 2.2% | Mar 25, 2020 | Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read vulnerability. Successful expl... |
| CVE-2020-3771 | MEDIUM | 4.3 | 2.2% | Mar 25, 2020 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds ... |
| CVE-2020-3808 | MEDIUM | 5.9 | 1.4% | Mar 25, 2020 | Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use (toctou) race condition ... |
| CVE-2020-5277 | MEDIUM | 5.4 | 0.7% | Mar 25, 2020 | PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with `url_name` parameter. The problem is f... |
| CVE-2020-2170 | MEDIUM | 5.4 | 0.7% | Mar 25, 2020 | Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote... |
| CVE-2020-2169 | MEDIUM | 6.1 | 1.0% | Mar 25, 2020 | A form validation endpoint in Jenkins Queue cleanup Plugin 1.3 and earlier does not properly escape a query parameter di... |
| CVE-2020-2164 | MEDIUM | 6.5 | 0.8% | Mar 25, 2020 | Jenkins Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password unencrypted in its global configurat... |
| CVE-2020-2163 | MEDIUM | 5.4 | 1.2% | Mar 25, 2020 | Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, result... |
| CVE-2020-2162 | MEDIUM | 5.4 | 1.2% | Mar 25, 2020 | Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not set Content-Security-Policy headers for files uploaded as fi... |
| CVE-2020-2161 | MEDIUM | 5.4 | 1.2% | Mar 25, 2020 | Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not properly escape node labels that are shown in the form valid... |
| CVE-2020-10791 | MEDIUM | 6.5 | 1.2% | Mar 25, 2020 | app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authe... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now