2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28348 | MEDIUM | 6.5 | 1.6% | Nov 24, 2020 | HashiCorp Nomad and Nomad Enterprise 0.9.0 up to 0.12.7 client Docker file sandbox feature may be subverted when not exp... |
| CVE-2020-26890 | HIGH | 7.5 | 3.0% | Nov 24, 2020 | Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.ro... |
| CVE-2020-15929 | CRITICAL | 9.8 | 4.5% | Nov 24, 2020 | In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters passed to system/runners/HTMLRunner.cfm allow ... |
| CVE-2020-15928 | MEDIUM | 5.3 | 1.7% | Nov 24, 2020 | In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters to test-browser/index.cfm allow directory trav... |
| CVE-2020-28991 | CRITICAL | 9.8 | 1.7% | Nov 24, 2020 | Gitea 0.9.99 through 1.12.x before 1.12.6 does not prevent a git protocol path that specifies a TCP port number and also... |
| CVE-2020-4006 | CRITICAL | 9.1 | 23.8% | Nov 23, 2020 | VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command i... |
| CVE-2020-28984 | CRITICAL | 9.8 | 2.2% | Nov 23, 2020 | prive/formulaires/configurer_preferences.php in SPIP before 3.2.8 does not properly validate the couleur, display, displ... |
| CVE-2020-26229 | LOW | 3.7 | 0.6% | Nov 23, 2020 | TYPO3 is an open source PHP based web content management system. In TYPO3 from version 10.4.0, and before version 10.4.1... |
| CVE-2020-25696 | HIGH | 7.5 | 2.6% | Nov 23, 2020 | A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, befo... |
| CVE-2020-25688 | LOW | 3.5 | 0.2% | Nov 23, 2020 | A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned... |
| CVE-2020-25660 | HIGH | 8.8 | 1.0% | Nov 23, 2020 | A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not ve... |
| CVE-2020-28360 | CRITICAL | 9.8 | 2.9% | Nov 23, 2020 | Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in ind... |
| CVE-2020-26231 | MEDIUM | 6.7 | 0.3% | Nov 23, 2020 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-15247 ... |
| CVE-2020-26228 | HIGH | 7.5 | 0.7% | Nov 23, 2020 | TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 user sessio... |
| CVE-2020-26227 | MEDIUM | 6.1 | 0.7% | Nov 23, 2020 | TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 the system ... |
| CVE-2020-24227 | HIGH | 7.5 | 1.4% | Nov 23, 2020 | Playground Sessions v2.5.582 (and earlier) for Windows, stores the user credentials in plain text allowing anyone with a... |
| CVE-2020-15437 | MEDIUM | 4.4 | 0.4% | Nov 23, 2020 | The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:s... |
| CVE-2020-15436 | MEDIUM | 6.7 | 0.9% | Nov 23, 2020 | Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or c... |
| CVE-2020-28927 | MEDIUM | 6.1 | 0.7% | Nov 23, 2020 | There is a Stored XSS in Magicpin v2.1 in the User Registration section. Each time an admin visits the manage user secti... |
| CVE-2020-15249 | MEDIUM | 5.4 | 0.5% | Nov 23, 2020 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version... |
| CVE-2020-15248 | MEDIUM | 4.2 | 0.3% | Nov 23, 2020 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version... |
| CVE-2020-15247 | MEDIUM | 5.2 | 0.3% | Nov 23, 2020 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version... |
| CVE-2020-15246 | HIGH | 7.5 | 1.7% | Nov 23, 2020 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version... |
| CVE-2020-7927 | MEDIUM | 6.5 | 1.0% | Nov 23, 2020 | Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key ... |
| CVE-2020-28896 | MEDIUM | 5.3 | 2.3% | Nov 23, 2020 | Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's ini... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now