2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1753 | MEDIUM | 5.5 | 0.5% | Mar 16, 2020 | A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prio... |
| CVE-2020-9518 | MEDIUM | 5.3 | 0.9% | Mar 16, 2020 | Login filter can access configuration files vulnerability in Micro Focus Service Manager (Web Tier), affecting versions ... |
| CVE-2020-9519 | MEDIUM | 5.3 | 0.9% | Mar 16, 2020 | HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.4... |
| CVE-2020-0088 | MEDIUM | 6.5 | 0.7% | Mar 15, 2020 | In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. ... |
| CVE-2020-10577 | MEDIUM | 4.8 | 0.5% | Mar 14, 2020 | An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property ... |
| CVE-2020-10576 | MEDIUM | 5.9 | 0.6% | Mar 14, 2020 | An issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin has a race condition t... |
| CVE-2020-10575 | MEDIUM | 4.2 | 0.5% | Mar 14, 2020 | An issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin mishandles session man... |
| CVE-2020-10076 | MEDIUM | 6.1 | 0.7% | Mar 13, 2020 | GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge ... |
| CVE-2020-10075 | MEDIUM | 6.1 | 0.7% | Mar 13, 2020 | GitLab 12.5 through 12.8.1 allows HTML Injection. A particular error header was potentially susceptible to injection or ... |
| CVE-2020-10218 | MEDIUM | 6.5 | 1.2% | Mar 13, 2020 | A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter b... |
| CVE-2020-10092 | MEDIUM | 6.1 | 0.7% | Mar 13, 2020 | GitLab 12.1 through 12.8.1 allows XSS. A cross-site scripting vulnerability was present in a particular view relating to... |
| CVE-2020-10091 | MEDIUM | 6.1 | 0.7% | Mar 13, 2020 | GitLab 9.3 through 12.8.1 allows XSS. A cross-site scripting vulnerability was found when viewing particular file types. |
| CVE-2020-10090 | MEDIUM | 5.3 | 0.9% | Mar 13, 2020 | GitLab 11.7 through 12.8.1 allows Information Disclosure. Under certain group conditions, group epic information was uni... |
| CVE-2020-10086 | MEDIUM | 5.3 | 1.3% | Mar 13, 2020 | GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vul... |
| CVE-2020-10085 | MEDIUM | 5.3 | 0.9% | Mar 13, 2020 | GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge private merge request t... |
| CVE-2020-10084 | MEDIUM | 5.3 | 0.9% | Mar 13, 2020 | GitLab EE 11.6 through 12.8.1 allows Information Disclosure. Sending a specially crafted request to the vulnerability_fe... |
| CVE-2020-10082 | MEDIUM | 5.3 | 1.1% | Mar 13, 2020 | GitLab 12.2 through 12.8.1 allows Denial of Service. A denial of service vulnerability impacting the designs for public ... |
| CVE-2020-10081 | MEDIUM | 6.5 | 0.9% | Mar 13, 2020 | GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potent... |
| CVE-2020-10080 | MEDIUM | 5.3 | 0.9% | Mar 13, 2020 | GitLab 8.3 through 12.8.1 allows Information Disclosure. It was possible for certain non-members to access the Contribut... |
| CVE-2020-10079 | MEDIUM | 5.3 | 0.9% | Mar 13, 2020 | GitLab 7.10 through 12.8.1 has Incorrect Access Control. Under certain conditions where users should have been required ... |
| CVE-2020-10078 | MEDIUM | 6.1 | 0.7% | Mar 13, 2020 | GitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a stored cross-site scri... |
| CVE-2020-10196 | MEDIUM | 6.1 | 1.4% | Mar 13, 2020 | An XSS vulnerability in the popup-builder plugin before 3.64.1 for WordPress allows remote attackers to inject arbitrary... |
| CVE-2020-10195 | MEDIUM | 6.3 | 1.1% | Mar 13, 2020 | The popup-builder plugin before 3.64.1 for WordPress allows information disclosure and settings modification, leading to... |
| CVE-2020-10544 | MEDIUM | 6.1 | 0.8% | Mar 13, 2020 | An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, ... |
| CVE-2020-7600 | MEDIUM | 5.3 | 1.1% | Mar 12, 2020 | querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now