2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-2131 | MEDIUM | 6.5 | 0.9% | Feb 12, 2020 | Jenkins Harvest SCM Plugin 0.5.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins master ... |
| CVE-2020-2130 | MEDIUM | 6.5 | 0.9% | Feb 12, 2020 | Jenkins Harvest SCM Plugin 0.5.1 and earlier stores a password unencrypted in its global configuration file on the Jenki... |
| CVE-2020-2129 | MEDIUM | 6.5 | 0.9% | Feb 12, 2020 | Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenk... |
| CVE-2020-2128 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | Jenkins ECX Copy Data Management Plugin 1.9 and earlier stores a password unencrypted in job config.xml files on the Jen... |
| CVE-2020-2127 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configura... |
| CVE-2020-2126 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins mast... |
| CVE-2020-2125 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration... |
| CVE-2020-2124 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files... |
| CVE-2020-2122 | MEDIUM | 5.4 | 0.8% | Feb 12, 2020 | Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resu... |
| CVE-2020-2119 | MEDIUM | 5.3 | 0.9% | Feb 12, 2020 | Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins c... |
| CVE-2020-2118 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allow... |
| CVE-2020-2117 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers with Overall... |
| CVE-2020-2113 | MEDIUM | 5.4 | 0.7% | Feb 12, 2020 | Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the default value shown on the UI, resulting in a stored... |
| CVE-2020-2112 | MEDIUM | 5.4 | 0.7% | Feb 12, 2020 | Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a store... |
| CVE-2020-2111 | MEDIUM | 5.4 | 0.9% | Feb 12, 2020 | Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field... |
| CVE-2020-8894 | MEDIUM | 6.5 | 1.4% | Feb 12, 2020 | An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsCon... |
| CVE-2020-8891 | MEDIUM | 5.9 | 1.4% | Feb 12, 2020 | An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force ser... |
| CVE-2020-8890 | MEDIUM | 5.9 | 1.1% | Feb 12, 2020 | An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and ... |
| CVE-2020-0756 | MEDIUM | 5.5 | 1.6% | Feb 11, 2020 | An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to proper... |
| CVE-2020-0755 | MEDIUM | 5.5 | 1.6% | Feb 11, 2020 | An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to proper... |
| CVE-2020-0751 | MEDIUM | 6 | 1.4% | Feb 11, 2020 | A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific mal... |
| CVE-2020-0748 | MEDIUM | 5.5 | 1.6% | Feb 11, 2020 | An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to proper... |
| CVE-2020-0746 | MEDIUM | 5.5 | 4.9% | Feb 11, 2020 | An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, a... |
| CVE-2020-0744 | MEDIUM | 5.5 | 1.9% | Feb 11, 2020 | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objec... |
| CVE-2020-0736 | MEDIUM | 5.5 | 1.5% | Feb 11, 2020 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now