2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2020-9459MEDIUM5.4Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1....
CVE-2020-9466MEDIUM6.1The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection.
CVE-2020-8127MEDIUM6.1Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attacke...
CVE-2020-1877MEDIUM4.4NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid poi...
CVE-2020-1875MEDIUM5.5NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid...
CVE-2020-1874MEDIUM5.5NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid ...
CVE-2020-1861MEDIUM4.4CloudEngine 12800 with versions of V200R001C00SPC600,V200R001C00SPC700,V200R002C01,V200R002C50SPC800,V200R002C50SPC800PW...
CVE-2020-1792MEDIUM5.5Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0...
CVE-2020-9447MEDIUM6.1There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can up...
CVE-2020-9399MEDIUM5.5The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 def...
CVE-2020-7063MEDIUM5.3In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData:...
CVE-2020-3875MEDIUM5.5A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, ...
CVE-2020-3874MEDIUM5.3An issued existed in the naming of screenshots. The issue was corrected with improved naming. This issue is fixed in iOS...
CVE-2020-3872MEDIUM5.5A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS ...
CVE-2020-3869MEDIUM5.3An issue existed in the handling of the local user's self-view. The issue was corrected with improved logic. This issue ...
CVE-2020-3867MEDIUM6.1A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13...
CVE-2020-3866MEDIUM5.5This was addressed with additional checks by Gatekeeper on files mounted through a network share. This issue is fixed in...
CVE-2020-3862MEDIUM6.5A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3...
CVE-2020-3841MEDIUM6.5The issue was addressed with improved UI handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, Safari 13.0.5. A...
CVE-2020-3839MEDIUM5.5A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.3. An app...
CVE-2020-3836MEDIUM5.5An access issue was addressed with improved memory management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macO...
CVE-2020-3835MEDIUM4.4A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. T...
CVE-2020-3833MEDIUM4.3An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5....
CVE-2020-5401MEDIUM5.3Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send inva...
CVE-2020-5400MEDIUM6.5Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, w...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now