2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10790 | MEDIUM | 5.4 | 0.9% | Mar 25, 2020 | openITCOCKPIT before 3.7.3 has unnecessary files (such as Lodash files) under the web root, which leads to XSS. |
| CVE-2020-5559 | MEDIUM | 6.1 | 0.8% | Mar 25, 2020 | Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTM... |
| CVE-2020-5557 | MEDIUM | 6.1 | 0.8% | Mar 25, 2020 | Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via ... |
| CVE-2020-5552 | MEDIUM | 6.1 | 0.8% | Mar 25, 2020 | Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HT... |
| CVE-2020-5261 | MEDIUM | 6.8 | 1.2% | Mar 25, 2020 | Saml2 Authentication services for ASP.NET (NuGet package Sustainsys.Saml2) greater than 2.0.0, and less than version 2.5... |
| CVE-2020-6816 | MEDIUM | 6.1 | 1.3% | Mar 24, 2020 | In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted an... |
| CVE-2020-6802 | MEDIUM | 6.1 | 1.7% | Mar 24, 2020 | In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allo... |
| CVE-2020-10942 | MEDIUM | 5.3 | 1.0% | Mar 24, 2020 | In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which mi... |
| CVE-2020-10941 | MEDIUM | 5.9 | 1.5% | Mar 24, 2020 | Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usag... |
| CVE-2020-10855 | MEDIUM | 4.6 | 0.1% | Mar 24, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (F... |
| CVE-2020-10853 | MEDIUM | 5.3 | 0.3% | Mar 24, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) software. Gallery leaks cached data. The Samsung IDs are S... |
| CVE-2020-10847 | MEDIUM | 6.8 | 0.1% | Mar 24, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) (Galaxy S8 and Note8) software. Facial recognition can be ... |
| CVE-2020-10846 | MEDIUM | 5.5 | 0.1% | Mar 24, 2020 | An issue was discovered on Samsung mobile devices with P(9.x) and Q(10.x) software. Attackers can enable the OEM unlock ... |
| CVE-2020-10845 | MEDIUM | 6.4 | 0.1% | Mar 24, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. There is a race condition l... |
| CVE-2020-10844 | MEDIUM | 6.5 | 0.4% | Mar 24, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.x), and Q(10.0) software. There is an out-of-bounds r... |
| CVE-2020-10839 | MEDIUM | 6.8 | 0.1% | Mar 24, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factor... |
| CVE-2020-10834 | MEDIUM | 5.3 | 0.3% | Mar 24, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can view notifications on the lock scr... |
| CVE-2020-4309 | MEDIUM | 5.3 | 1.3% | Mar 24, 2020 | IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid i... |
| CVE-2020-10385 | MEDIUM | 5.4 | 4.4% | Mar 24, 2020 | A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.... |
| CVE-2020-9359 | MEDIUM | 5.3 | 1.5% | Mar 24, 2020 | KDE Okular before 1.10.0 allows code execution via an action link in a PDF document. |
| CVE-2020-1744 | MEDIUM | 5.6 | 1.1% | Mar 24, 2020 | A flaw was found in keycloak before version 9.0.1. When configuring an Conditional OTP Authentication Flow as a post log... |
| CVE-2020-10570 | MEDIUM | 6.1 | 0.4% | Mar 24, 2020 | The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attacker... |
| CVE-2020-5252 | MEDIUM | 4.1 | 0.4% | Mar 23, 2020 | The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that a... |
| CVE-2020-8866 | MEDIUM | 6.5 | 9.6% | Mar 23, 2020 | This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmai... |
| CVE-2020-8865 | MEDIUM | 6.3 | 6.8% | Mar 23, 2020 | This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webma... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now