2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7482 | MEDIUM | 6.1 | 0.8% | Mar 23, 2020 | A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andov... |
| CVE-2020-7481 | MEDIUM | 6.1 | 0.8% | Mar 23, 2020 | A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andov... |
| CVE-2020-10871 | MEDIUM | 5.3 | 1.7% | Mar 23, 2020 | In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOT... |
| CVE-2020-10870 | MEDIUM | 5.5 | 0.3% | Mar 23, 2020 | Zim through 0.72.1 creates temporary directories with predictable names. A malicious user could predict and create Zim's... |
| CVE-2020-8876 | MEDIUM | 5.5 | 0.5% | Mar 23, 2020 | This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.2-... |
| CVE-2020-8874 | MEDIUM | 6.7 | 0.4% | Mar 23, 2020 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-4... |
| CVE-2020-8873 | MEDIUM | 6.7 | 0.4% | Mar 23, 2020 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-4... |
| CVE-2020-8872 | MEDIUM | 4.4 | 0.5% | Mar 23, 2020 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt... |
| CVE-2020-8871 | MEDIUM | 6.7 | 0.6% | Mar 23, 2020 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.0-4... |
| CVE-2020-8838 | MEDIUM | 6.4 | 1.6% | Mar 23, 2020 | An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not vali... |
| CVE-2020-6426 | MEDIUM | 6.5 | 2.9% | Mar 23, 2020 | Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially expl... |
| CVE-2020-6425 | MEDIUM | 5.4 | 1.2% | Mar 23, 2020 | Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced ... |
| CVE-2020-8497 | MEDIUM | 5.3 | 5.3% | Mar 23, 2020 | In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format an... |
| CVE-2020-1951 | MEDIUM | 5.5 | 2.7% | Mar 23, 2020 | A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23. |
| CVE-2020-1950 | MEDIUM | 5.5 | 2.6% | Mar 23, 2020 | A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23... |
| CVE-2020-10660 | MEDIUM | 5.3 | 0.8% | Mar 23, 2020 | HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Gro... |
| CVE-2020-10821 | MEDIUM | 4.8 | 73.6% | Mar 22, 2020 | Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter. |
| CVE-2020-10820 | MEDIUM | 4.8 | 30.1% | Mar 22, 2020 | Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter. |
| CVE-2020-10819 | MEDIUM | 4.8 | 73.8% | Mar 22, 2020 | Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter. |
| CVE-2020-10812 | MEDIUM | 5.5 | 1.5% | Mar 22, 2020 | An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5F_get_nrefs() locate... |
| CVE-2020-10811 | MEDIUM | 5.5 | 1.4% | Mar 22, 2020 | An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode(... |
| CVE-2020-10810 | MEDIUM | 5.5 | 1.4% | Mar 22, 2020 | An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() loc... |
| CVE-2020-10809 | MEDIUM | 5.5 | 1.5% | Mar 22, 2020 | An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located... |
| CVE-2020-10807 | MEDIUM | 5.3 | 1.4% | Mar 22, 2020 | auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in... |
| CVE-2020-10803 | MEDIUM | 5.4 | 1.6% | Mar 22, 2020 | In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code c... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now