2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-17526 | HIGH | 7.7 | 23.3% | Dec 21, 2020 | Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a maliciou... |
| CVE-2020-3999 | MEDIUM | 6.5 | 0.3% | Dec 21, 2020 | VMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x prior to 15.5.7), VMware ... |
| CVE-2020-27846 | CRITICAL | 9.8 | 4.8% | Dec 21, 2020 | A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authenticatio... |
| CVE-2020-35276 | CRITICAL | 9.8 | 1.8% | Dec 21, 2020 | EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQ... |
| CVE-2020-35275 | MEDIUM | 5.4 | 1.0% | Dec 21, 2020 | Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to an... |
| CVE-2020-35274 | MEDIUM | 4.8 | 0.6% | Dec 21, 2020 | DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting (XSS) to gain remote privileges. An attac... |
| CVE-2020-35273 | HIGH | 8 | 0.6% | Dec 21, 2020 | EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to ... |
| CVE-2020-26049 | MEDIUM | 6.1 | 1.3% | Dec 21, 2020 | Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution. |
| CVE-2020-35590 | CRITICAL | 9.8 | 4.3% | Dec 21, 2020 | LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per I... |
| CVE-2020-35589 | MEDIUM | 5.4 | 0.8% | Dec 21, 2020 | The limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows wp-admin/options-general.php?page=limit-logi... |
| CVE-2020-29447 | MEDIUM | 4.3 | 1.0% | Dec 21, 2020 | Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of ... |
| CVE-2020-35579 | HIGH | 7.5 | 1.1% | Dec 20, 2020 | tindy2013 subconverter 0.6.4 has a /sub?target=%TARGET%&url=%URL%&config=%CONFIG% API endpoint that accepts an arbitrary... |
| CVE-2020-35573 | HIGH | 7.5 | 2.7% | Dec 20, 2020 | srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU consumption) via a long timesta... |
| CVE-2020-7203 | CRITICAL | 9.8 | 5.0% | Dec 18, 2020 | A potential security vulnerability has been identified in HPE iLO Amplifier Pack server version 1.70. The vulnerability ... |
| CVE-2020-7201 | HIGH | 8.8 | 0.6% | Dec 18, 2020 | A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G... |
| CVE-2020-7200 | CRITICAL | 9.8 | 81.9% | Dec 18, 2020 | A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerabili... |
| CVE-2020-14271 | MEDIUM | 6.1 | 1.1% | Dec 18, 2020 | HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling ... |
| CVE-2020-14224 | CRITICAL | 9.8 | 2.2% | Dec 18, 2020 | A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthentic... |
| CVE-2020-4080 | MEDIUM | 6.1 | 0.8% | Dec 18, 2020 | HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of me... |
| CVE-2020-5803 | HIGH | 8.1 | 1.7% | Dec 18, 2020 | Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete arbit... |
| CVE-2020-27781 | HIGH | 7.1 | 0.3% | Dec 18, 2020 | User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential pr... |
| CVE-2020-17520 | MEDIUM | 6.5 | 1.3% | Dec 18, 2020 | In the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-manager's admin, permission verificat... |
| CVE-2020-13535 | HIGH | 7.8 | 0.7% | Dec 18, 2020 | A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker ca... |
| CVE-2020-11974 | CRITICAL | 9.8 | 7.6% | Dec 18, 2020 | In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing my... |
| CVE-2020-13519 | HIGH | 8.8 | 0.6% | Dec 18, 2020 | A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM 4.8.0. A ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now