2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-29579 | CRITICAL | 9.8 | 2.2% | Dec 8, 2020 | The official Express Gateway Docker images before 1.14.0 contain a blank password for a root user. Systems using the Exp... |
| CVE-2020-29577 | CRITICAL | 9.8 | 2.3% | Dec 8, 2020 | The official znc docker images before 1.7.1-slim contain a blank password for a root user. Systems using the znc docker ... |
| CVE-2020-29576 | CRITICAL | 9.8 | 3.0% | Dec 8, 2020 | The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop D... |
| CVE-2020-29575 | CRITICAL | 9.8 | 2.9% | Dec 8, 2020 | The official elixir Docker images before 1.8.0-alpine (Alpine specific) contain a blank password for a root user. System... |
| CVE-2020-29564 | CRITICAL | 9.8 | 6.2% | Dec 8, 2020 | The official Consul Docker images 0.7.1 through 1.4.2 contain a blank password for a root user. System using the Consul ... |
| CVE-2020-1971 | MEDIUM | 5.9 | 7.0% | Dec 8, 2020 | The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known... |
| CVE-2020-29578 | CRITICAL | 9.8 | 2.2% | Dec 8, 2020 | The official piwik Docker images before fpm-alpine (Alpine specific) contain a blank password for a root user. Systems u... |
| CVE-2020-26255 | CRITICAL | 9.1 | 1.5% | Dec 8, 2020 | Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.4.5, and Kirby Panel before version 2.5.14 , an editor with... |
| CVE-2020-26254 | HIGH | 7.7 | 1.3% | Dec 8, 2020 | omniauth-apple is the OmniAuth strategy for "Sign In with Apple" (RubyGem omniauth-apple). In omniauth-apple before vers... |
| CVE-2020-25955 | MEDIUM | 5.4 | 0.9% | Dec 8, 2020 | SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting (XSS)... |
| CVE-2020-29540 | HIGH | 7.5 | 1.2% | Dec 8, 2020 | API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Syst... |
| CVE-2020-29539 | MEDIUM | 5.4 | 0.7% | Dec 8, 2020 | A Cross-Site Scripting (XSS) issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor... |
| CVE-2020-25889 | CRITICAL | 9.8 | 2.7% | Dec 8, 2020 | Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injec... |
| CVE-2020-17531 | CRITICAL | 9.8 | 9.7% | Dec 8, 2020 | A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp... |
| CVE-2020-26253 | MEDIUM | 5.9 | 0.6% | Dec 8, 2020 | Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.3.6, and Kirby Panel before version 2.5.14 there is a vulne... |
| CVE-2020-27822 | MEDIUM | 5.9 | 1.1% | Dec 8, 2020 | A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final.... |
| CVE-2020-27818 | LOW | 3.3 | 1.2% | Dec 8, 2020 | A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be p... |
| CVE-2020-25692 | HIGH | 7.5 | 2.2% | Dec 8, 2020 | A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming ... |
| CVE-2020-25677 | MEDIUM | 5.5 | 0.2% | Dec 8, 2020 | A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissi... |
| CVE-2020-25631 | MEDIUM | 6.1 | 0.9% | Dec 8, 2020 | A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScr... |
| CVE-2020-25630 | HIGH | 7.5 | 1.3% | Dec 8, 2020 | A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quot... |
| CVE-2020-25629 | HIGH | 8.8 | 1.3% | Dec 8, 2020 | A vulnerability was found in Moodle where users with "Log in as" capability in a course context (typically, course manag... |
| CVE-2020-25628 | MEDIUM | 6.1 | 1.0% | Dec 8, 2020 | The filter in the tag manager required extra sanitizing to prevent a reflected XSS risk. This affects 3.9 to 3.9.1, 3.8 ... |
| CVE-2020-8566 | MEDIUM | 5.5 | 0.5% | Dec 7, 2020 | In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets... |
| CVE-2020-8565 | MEDIUM | 5.5 | 0.5% | Dec 7, 2020 | In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now