2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5188 | MEDIUM | 6.5 | 1.8% | Feb 24, 2020 | DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions. |
| CVE-2020-5186 | MEDIUM | 5.4 | 0.9% | Feb 24, 2020 | DNN (formerly DotNetNuke) through 9.4.4 allows XSS (issue 1 of 2). |
| CVE-2020-9351 | MEDIUM | 5.3 | 1.1% | Feb 23, 2020 | An issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request to /tools/developerCons... |
| CVE-2020-9350 | MEDIUM | 5.4 | 0.5% | Feb 23, 2020 | Graph Builder in SAS Visual Analytics 8.5 allows XSS via a graph template that is accessed directly. |
| CVE-2020-9342 | MEDIUM | 5.5 | 1.6% | Feb 22, 2020 | The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a ... |
| CVE-2020-9339 | MEDIUM | 5.4 | 0.6% | Feb 22, 2020 | SOPlanning 1.45 allows XSS via the Name or Comment to status.php. |
| CVE-2020-9338 | MEDIUM | 5.4 | 0.5% | Feb 22, 2020 | SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field. |
| CVE-2020-9336 | MEDIUM | 5.4 | 0.5% | Feb 22, 2020 | fauzantrif eLection 2.0 has XSS via the Admin Dashboard -> Settings -> Election -> "message if election is closed" field... |
| CVE-2020-9329 | MEDIUM | 5.9 | 0.7% | Feb 21, 2020 | Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go ... |
| CVE-2020-5326 | MEDIUM | 5.3 | 0.3% | Feb 21, 2020 | Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot In... |
| CVE-2020-5324 | MEDIUM | 4.4 | 0.3% | Feb 21, 2020 | Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is li... |
| CVE-2020-5533 | MEDIUM | 6.1 | 0.8% | Feb 21, 2020 | Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arb... |
| CVE-2020-8960 | MEDIUM | 6.1 | 0.9% | Feb 20, 2020 | Western Digital mycloud.com before Web Version 2.2.0-134 allows XSS. |
| CVE-2020-9320 | MEDIUM | 5.5 | 2.8% | Feb 20, 2020 | Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before ... |
| CVE-2020-9003 | MEDIUM | 5.4 | 1.0% | Feb 20, 2020 | A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Successful exploitation... |
| CVE-2020-6977 | MEDIUM | 6.8 | 0.4% | Feb 20, 2020 | A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specia... |
| CVE-2020-7942 | MEDIUM | 6.5 | 0.8% | Feb 19, 2020 | Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the syste... |
| CVE-2020-3163 | MEDIUM | 5.9 | 0.9% | Feb 19, 2020 | A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remot... |
| CVE-2020-3160 | MEDIUM | 5.3 | 1.2% | Feb 19, 2020 | A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could ... |
| CVE-2020-3159 | MEDIUM | 6.1 | 0.8% | Feb 19, 2020 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker t... |
| CVE-2020-3156 | MEDIUM | 6.1 | 1.0% | Feb 19, 2020 | A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacke... |
| CVE-2020-3154 | MEDIUM | 4.9 | 0.9% | Feb 19, 2020 | A vulnerability in the web UI of Cisco Cloud Web Security (CWS) could allow an authenticated, remote attacker to execute... |
| CVE-2020-3153 | MEDIUM | 6.5 | 27.5% | Feb 19, 2020 | A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authent... |
| CVE-2020-3138 | MEDIUM | 6.7 | 0.2% | Feb 19, 2020 | A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenti... |
| CVE-2020-3132 | MEDIUM | 5.9 | 1.5% | Feb 19, 2020 | A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA)... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now