2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14339 | HIGH | 8.8 | 0.4% | Dec 3, 2020 | A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This fil... |
| CVE-2020-13584 | HIGH | 8.8 | 4.4% | Dec 3, 2020 | An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web... |
| CVE-2020-13543 | HIGH | 8.8 | 3.3% | Dec 3, 2020 | A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web... |
| CVE-2020-13542 | HIGH | 7.8 | 0.6% | Dec 3, 2020 | A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depend... |
| CVE-2020-13531 | HIGH | 8.8 | 2.7% | Dec 3, 2020 | A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files. A specia... |
| CVE-2020-2324 | HIGH | 7.5 | 1.3% | Dec 3, 2020 | Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2020-2323 | MEDIUM | 5.3 | 0.8% | Dec 3, 2020 | Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers w... |
| CVE-2020-2322 | HIGH | 7.5 | 1.3% | Dec 3, 2020 | Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attac... |
| CVE-2020-2321 | HIGH | 8.1 | 0.7% | Dec 3, 2020 | A cross-site request forgery (CSRF) vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to s... |
| CVE-2020-2320 | CRITICAL | 9.8 | 0.9% | Dec 3, 2020 | Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads. |
| CVE-2020-28939 | HIGH | 7.2 | 1.7% | Dec 3, 2020 | OpenClinic version 0.8.2 is affected by a medical/test_new.php insecure file upload vulnerability. This vulnerability al... |
| CVE-2020-28938 | MEDIUM | 5.4 | 0.5% | Dec 3, 2020 | OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application... |
| CVE-2020-28937 | HIGH | 7.5 | 1.3% | Dec 3, 2020 | OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to acce... |
| CVE-2020-14318 | MEDIUM | 4.3 | 1.5% | Dec 3, 2020 | A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to g... |
| CVE-2020-6021 | HIGH | 7.8 | 0.3% | Dec 3, 2020 | Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which t... |
| CVE-2020-6017 | CRITICAL | 9.8 | 3.1% | Dec 3, 2020 | Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_Rece... |
| CVE-2020-6111 | HIGH | 7.5 | 4.6% | Dec 3, 2020 | An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Program... |
| CVE-2020-5680 | HIGH | 7.5 | 1.4% | Dec 3, 2020 | Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a den... |
| CVE-2020-5679 | MEDIUM | 6.1 | 0.7% | Dec 3, 2020 | Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking atta... |
| CVE-2020-5678 | MEDIUM | 6.1 | 1.2% | Dec 3, 2020 | Stored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to inject arbitrary script... |
| CVE-2020-5677 | MEDIUM | 6.1 | 1.1% | Dec 3, 2020 | Reflected cross-site scripting vulnerability in GROWI v4.0.0 and earlier allows remote attackers to inject arbitrary scr... |
| CVE-2020-5676 | HIGH | 7.5 | 1.8% | Dec 3, 2020 | GROWI v4.1.3 and earlier allow remote attackers to obtain information which is not allowed to access via unspecified vec... |
| CVE-2020-5638 | MEDIUM | 6.1 | 0.8% | Dec 3, 2020 | Cross-site scripting vulnerability in desknet's NEO (desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NE... |
| CVE-2020-26246 | MEDIUM | 6.5 | 0.8% | Dec 3, 2020 | Pimcore is an open source digital experience platform. In Pimcore before version 6.8.5 it is possible to modify & create... |
| CVE-2020-29288 | CRITICAL | 9.8 | 2.6% | Dec 2, 2020 | An SQL injection vulnerability was discovered in Gym Management System In manage_user.php file, GET parameter 'id' is vu... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now