2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8815 | HIGH | 7.5 | 2.2% | Feb 12, 2020 | Improper connection handling in the base connection handler in IKTeam BearFTP before v0.3.1 allows a remote attacker to ... |
| CVE-2020-8595 | HIGH | 7.3 | 2.6% | Feb 12, 2020 | Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. Th... |
| CVE-2020-2123 | HIGH | 8.8 | 2.3% | Feb 12, 2020 | Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary typ... |
| CVE-2020-2121 | HIGH | 8.8 | 2.7% | Feb 12, 2020 | Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiatio... |
| CVE-2020-2120 | HIGH | 8.8 | 1.1% | Feb 12, 2020 | Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2020-2116 | HIGH | 8.8 | 0.7% | Feb 12, 2020 | A cross-site request forgery vulnerability in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attack... |
| CVE-2020-2115 | HIGH | 8.8 | 1.1% | Feb 12, 2020 | Jenkins NUnit Plugin 0.25 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2020-2114 | HIGH | 7.5 | 1.1% | Feb 12, 2020 | Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenk... |
| CVE-2020-2110 | HIGH | 8.8 | 1.3% | Feb 12, 2020 | Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilatio... |
| CVE-2020-2109 | HIGH | 8.8 | 1.3% | Feb 12, 2020 | Sandbox protection in Jenkins Pipeline: Groovy Plugin 2.78 and earlier can be circumvented through default parameter exp... |
| CVE-2020-8893 | HIGH | 7.5 | 2.0% | Feb 12, 2020 | An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/... |
| CVE-2020-8892 | HIGH | 8.1 | 1.7% | Feb 12, 2020 | An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-for... |
| CVE-2020-0792 | HIGH | 8.8 | 1.3% | Feb 11, 2020 | An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory,... |
| CVE-2020-0767 | HIGH | 7.5 | 17.6% | Feb 11, 2020 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, ... |
| CVE-2020-0759 | HIGH | 8.8 | 14.8% | Feb 11, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje... |
| CVE-2020-0757 | HIGH | 7.8 | 0.9% | Feb 11, 2020 | An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands, aka ... |
| CVE-2020-0754 | HIGH | 7.8 | 1.5% | Feb 11, 2020 | An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka... |
| CVE-2020-0753 | HIGH | 7.8 | 2.3% | Feb 11, 2020 | An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka... |
| CVE-2020-0752 | HIGH | 7.8 | 0.8% | Feb 11, 2020 | An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka... |
| CVE-2020-0750 | HIGH | 7.8 | 0.8% | Feb 11, 2020 | An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in... |
| CVE-2020-0749 | HIGH | 7.8 | 0.8% | Feb 11, 2020 | An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in... |
| CVE-2020-0747 | HIGH | 7.8 | 0.8% | Feb 11, 2020 | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,... |
| CVE-2020-0745 | HIGH | 7.8 | 0.9% | Feb 11, 2020 | An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory,... |
| CVE-2020-0743 | HIGH | 7.8 | 0.8% | Feb 11, 2020 | An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in... |
| CVE-2020-0742 | HIGH | 7.8 | 0.8% | Feb 11, 2020 | An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now