2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7258 | MEDIUM | 4.8 | 0.5% | Mar 18, 2020 | Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update all... |
| CVE-2020-7256 | MEDIUM | 4.8 | 0.5% | Mar 18, 2020 | Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update all... |
| CVE-2020-10665 | MEDIUM | 6.7 | 1.4% | Mar 18, 2020 | Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnost... |
| CVE-2020-9323 | MEDIUM | 5.3 | 1.6% | Mar 18, 2020 | Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx. |
| CVE-2020-6976 | MEDIUM | 5.5 | 0.8% | Mar 18, 2020 | Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be exploited wh... |
| CVE-2020-4199 | MEDIUM | 4.3 | 0.5% | Mar 18, 2020 | IBM Tivoli Netcool/OMNIbus 8.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute ma... |
| CVE-2020-9443 | MEDIUM | 6.1 | 0.6% | Mar 18, 2020 | Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be expl... |
| CVE-2020-10659 | MEDIUM | 4.3 | 0.4% | Mar 18, 2020 | Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validati... |
| CVE-2020-1720 | MEDIUM | 6.5 | 1.2% | Mar 17, 2020 | A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization chec... |
| CVE-2020-10596 | MEDIUM | 5.4 | 2.7% | Mar 17, 2020 | OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upl... |
| CVE-2020-10122 | MEDIUM | 6.5 | 0.9% | Mar 17, 2020 | cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547). |
| CVE-2020-10116 | MEDIUM | 5.3 | 0.8% | Mar 17, 2020 | cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI ca... |
| CVE-2020-10114 | MEDIUM | 6.1 | 0.6% | Mar 17, 2020 | cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535). |
| CVE-2020-10113 | MEDIUM | 6.1 | 0.6% | Mar 17, 2020 | cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515). |
| CVE-2020-6646 | MEDIUM | 5.4 | 0.8% | Mar 17, 2020 | An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored... |
| CVE-2020-6175 | MEDIUM | 5.9 | 0.6% | Mar 16, 2020 | Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation. |
| CVE-2020-9472 | MEDIUM | 6.5 | 2.1% | Mar 16, 2020 | Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package f... |
| CVE-2020-7608 | MEDIUM | 5.3 | 0.5% | Mar 16, 2020 | yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload. |
| CVE-2020-7916 | MEDIUM | 6.5 | 1.1% | Mar 16, 2020 | be_teacher in class-lp-admin-ajax.php in the LearnPress plugin 3.2.6.5 and earlier for WordPress allows any registered u... |
| CVE-2020-6586 | MEDIUM | 5.4 | 27.3% | Mar 16, 2020 | Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /adm... |
| CVE-2020-6584 | MEDIUM | 6.5 | 3.9% | Mar 16, 2020 | Nagios Log Server 2.1.3 has Incorrect Access Control. |
| CVE-2020-1740 | MEDIUM | 4.7 | 0.4% | Mar 16, 2020 | A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-v... |
| CVE-2020-1735 | MEDIUM | 4.6 | 0.5% | Mar 16, 2020 | A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a n... |
| CVE-2020-10242 | MEDIUM | 6.1 | 1.0% | Mar 16, 2020 | An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the Protostar and Beez3 JavaSc... |
| CVE-2020-10240 | MEDIUM | 5.3 | 1.2% | Mar 16, 2020 | An issue was discovered in Joomla! before 3.9.16. Missing length checks in the user table can lead to the creation of us... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now