2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8498 | MEDIUM | 5.4 | 1.2% | Jan 30, 2020 | XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gist... |
| CVE-2020-8496 | MEDIUM | 4.8 | 0.5% | Jan 30, 2020 | In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability b... |
| CVE-2020-8493 | MEDIUM | 4.8 | 1.5% | Jan 30, 2020 | A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via... |
| CVE-2020-5231 | MEDIUM | 6.5 | 0.6% | Jan 30, 2020 | In Opencast before 7.6 and 8.1, users with the role ROLE_COURSE_ADMIN can use the user-utils endpoint to create new user... |
| CVE-2020-8095 | MEDIUM | 5.5 | 0.5% | Jan 30, 2020 | A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an at... |
| CVE-2020-8492 | MEDIUM | 6.5 | 6.6% | Jan 30, 2020 | Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTT... |
| CVE-2020-5233 | MEDIUM | 6.1 | 1.1% | Jan 30, 2020 | OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an atta... |
| CVE-2020-8092 | MEDIUM | 5.5 | 0.3% | Jan 30, 2020 | A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to ob... |
| CVE-2020-7913 | MEDIUM | 6.1 | 1.1% | Jan 30, 2020 | JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description. |
| CVE-2020-7912 | MEDIUM | 5.3 | 1.5% | Jan 30, 2020 | In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups. |
| CVE-2020-7911 | MEDIUM | 6.1 | 0.6% | Jan 30, 2020 | In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS. |
| CVE-2020-7910 | MEDIUM | 5.4 | 0.5% | Jan 30, 2020 | JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role. |
| CVE-2020-7908 | MEDIUM | 4.3 | 0.8% | Jan 30, 2020 | In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages. |
| CVE-2020-8448 | MEDIUM | 5.5 | 0.5% | Jan 30, 2020 | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a ... |
| CVE-2020-8446 | MEDIUM | 5.5 | 0.5% | Jan 30, 2020 | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to pa... |
| CVE-2020-3758 | MEDIUM | 6.1 | 1.8% | Jan 29, 2020 | Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cros... |
| CVE-2020-3717 | MEDIUM | 5.3 | 3.2% | Jan 29, 2020 | Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a path traver... |
| CVE-2020-3715 | MEDIUM | 6.1 | 1.8% | Jan 29, 2020 | Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cros... |
| CVE-2020-2107 | MEDIUM | 4.3 | 0.6% | Jan 29, 2020 | Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenk... |
| CVE-2020-2106 | MEDIUM | 5.4 | 0.7% | Jan 29, 2020 | Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view,... |
| CVE-2020-2105 | MEDIUM | 5.4 | 1.8% | Jan 29, 2020 | REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks. |
| CVE-2020-2104 | MEDIUM | 4.3 | 1.1% | Jan 29, 2020 | Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage cha... |
| CVE-2020-2103 | MEDIUM | 5.4 | 7.0% | Jan 29, 2020 | Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI d... |
| CVE-2020-2102 | MEDIUM | 5.3 | 1.4% | Jan 29, 2020 | Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC. |
| CVE-2020-2101 | MEDIUM | 5.3 | 1.4% | Jan 29, 2020 | Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connec... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now