2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5222 | HIGH | 8.8 | 0.9% | Jan 30, 2020 | Opencast before 7.6 and 8.1 enables a remember-me cookie based on a hash created from the username, password, and an add... |
| CVE-2020-5229 | HIGH | 8.1 | 0.6% | Jan 30, 2020 | Opencast before 8.1 stores passwords using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthe... |
| CVE-2020-5228 | HIGH | 7.5 | 1.0% | Jan 30, 2020 | Opencast before 8.1 and 7.6 allows unauthorized public access to all media and metadata by default via OAI-PMH. OAI-PMH ... |
| CVE-2020-8093 | HIGH | 7.8 | 0.4% | Jan 30, 2020 | A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a li... |
| CVE-2020-3147 | HIGH | 7.5 | 2.3% | Jan 30, 2020 | A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause ... |
| CVE-2020-7909 | HIGH | 7.5 | 1.1% | Jan 30, 2020 | In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI. |
| CVE-2020-7906 | HIGH | 7.5 | 0.7% | Jan 30, 2020 | In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows instal... |
| CVE-2020-7905 | HIGH | 7.5 | 1.2% | Jan 30, 2020 | Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network. |
| CVE-2020-7904 | HIGH | 7.4 | 1.4% | Jan 30, 2020 | In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS. |
| CVE-2020-1931 | HIGH | 8.1 | 6.5% | Jan 30, 2020 | A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.c... |
| CVE-2020-1930 | HIGH | 8.1 | 7.1% | Jan 30, 2020 | A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuratio... |
| CVE-2020-8442 | HIGH | 8.8 | 2.4% | Jan 30, 2020 | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a ... |
| CVE-2020-8438 | HIGH | 7.2 | 1.6% | Jan 29, 2020 | Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hid... |
| CVE-2020-3719 | HIGH | 7.5 | 3.2% | Jan 29, 2020 | Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql inject... |
| CVE-2020-3714 | HIGH | 7.8 | 3.6% | Jan 29, 2020 | Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lea... |
| CVE-2020-3713 | HIGH | 7.8 | 3.6% | Jan 29, 2020 | Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lea... |
| CVE-2020-3712 | HIGH | 7.8 | 3.5% | Jan 29, 2020 | Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lea... |
| CVE-2020-3711 | HIGH | 7.8 | 3.5% | Jan 29, 2020 | Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lea... |
| CVE-2020-3710 | HIGH | 7.8 | 3.6% | Jan 29, 2020 | Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lea... |
| CVE-2020-8416 | HIGH | 7.5 | 14.2% | Jan 29, 2020 | IKTeam BearFTP before 0.2.0 allows remote attackers to achieve denial of service via a large volume of connections to th... |
| CVE-2020-2108 | HIGH | 7.6 | 0.9% | Jan 29, 2020 | Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can b... |
| CVE-2020-2099 | HIGH | 8.6 | 1.0% | Jan 29, 2020 | Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent ... |
| CVE-2020-7965 | HIGH | 8.8 | 0.5% | Jan 29, 2020 | flaskparser.py in Webargs 5.x through 5.5.2 doesn't check that the Content-Type header is application/json when receivin... |
| CVE-2020-8428 | HIGH | 7.1 | 0.7% | Jan 29, 2020 | fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a... |
| CVE-2020-8424 | HIGH | 8.8 | 1.5% | Jan 28, 2020 | Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now