2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26273 | MEDIUM | 5.2 | 0.9% | Dec 16, 2020 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery before versio... |
| CVE-2020-26259 | MEDIUM | 6.8 | 82.4% | Dec 16, 2020 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to... |
| CVE-2020-26258 | HIGH | 7.7 | 81.8% | Dec 16, 2020 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Fo... |
| CVE-2020-35469 | CRITICAL | 9.8 | 2.1% | Dec 16, 2020 | The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user. Systems deployed u... |
| CVE-2020-35468 | CRITICAL | 9.8 | 2.1% | Dec 16, 2020 | The Appbase streams Docker image 2.1.2 contains a blank password for the root user. Systems deployed using affected vers... |
| CVE-2020-35193 | CRITICAL | 9.8 | 2.1% | Dec 16, 2020 | The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System us... |
| CVE-2020-35467 | CRITICAL | 9.8 | 2.2% | Dec 15, 2020 | The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affe... |
| CVE-2020-35466 | CRITICAL | 9.8 | 2.1% | Dec 15, 2020 | The Blackfire Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affect... |
| CVE-2020-35465 | — | — | — | Dec 15, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-35464 | CRITICAL | 9.8 | 2.1% | Dec 15, 2020 | Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using ... |
| CVE-2020-35463 | CRITICAL | 9.8 | 2.1% | Dec 15, 2020 | Version 1.0.0 of the Instana Dynamic APM Docker image contains a blank password for the root user. Systems deployed usin... |
| CVE-2020-35462 | CRITICAL | 9.8 | 2.1% | Dec 15, 2020 | Version 3.16.0 of the CoScale agent Docker image contains a blank password for the root user. Systems deployed using aff... |
| CVE-2020-35122 | HIGH | 7.5 | 0.8% | Dec 15, 2020 | An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could by... |
| CVE-2020-35121 | HIGH | 8.8 | 1.0% | Dec 15, 2020 | An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could in... |
| CVE-2020-29663 | CRITICAL | 9.1 | 1.6% | Dec 15, 2020 | Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically b... |
| CVE-2020-35416 | MEDIUM | 6.1 | 2.7% | Dec 15, 2020 | Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admi... |
| CVE-2020-35381 | HIGH | 7.5 | 2.3% | Dec 15, 2020 | jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a G... |
| CVE-2020-35380 | HIGH | 7.5 | 1.7% | Dec 15, 2020 | GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON. |
| CVE-2020-29606 | — | — | — | Dec 15, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-28072 | HIGH | 7.2 | 2.6% | Dec 15, 2020 | A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker c... |
| CVE-2020-23957 | MEDIUM | 6.1 | 0.7% | Dec 15, 2020 | Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by... |
| CVE-2020-25759 | HIGH | 8.8 | 2.3% | Dec 15, 2020 | An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interfa... |
| CVE-2020-25758 | HIGH | 8.8 | 1.2% | Dec 15, 2020 | An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could al... |
| CVE-2020-25757 | HIGH | 8.8 | 2.0% | Dec 15, 2020 | A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being... |
| CVE-2020-25195 | HIGH | 7.5 | 1.5% | Dec 15, 2020 | The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on t... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now