2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26548 | HIGH | 8.8 | 1.4% | Nov 17, 2020 | An issue was discovered in Aviatrix Controller before R5.4.1290. There is an insecure sudo rule: a user exists that can ... |
| CVE-2020-26216 | MEDIUM | 6.1 | 1.0% | Nov 17, 2020 | TYPO3 Fluid before versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 and 2.6.10 is vulnerable to Cross-Site Scripting. ... |
| CVE-2020-25890 | MEDIUM | 6.1 | 1.5% | Nov 17, 2020 | The web application of Kyocera printer (ECOSYS M2640IDW) is affected by Stored XSS vulnerability, discovered in the addi... |
| CVE-2020-28136 | HIGH | 8.8 | 2.9% | Nov 17, 2020 | An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote... |
| CVE-2020-28133 | CRITICAL | 9.8 | 2.1% | Nov 17, 2020 | An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication ... |
| CVE-2020-25988 | MEDIUM | 6.5 | 3.0% | Nov 17, 2020 | UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 (P4410-V2–1.34H) has an action 'X_GetAccess' wh... |
| CVE-2020-28140 | CRITICAL | 9.8 | 1.8% | Nov 17, 2020 | SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Product... |
| CVE-2020-28139 | MEDIUM | 6.1 | 0.8% | Nov 17, 2020 | SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail fi... |
| CVE-2020-28138 | CRITICAL | 9.8 | 2.0% | Nov 17, 2020 | SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php. |
| CVE-2020-26405 | HIGH | 7.1 | 1.4% | Nov 17, 2020 | Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to sa... |
| CVE-2020-13349 | MEDIUM | 4.3 | 0.9% | Nov 17, 2020 | An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a f... |
| CVE-2020-13348 | MEDIUM | 5.7 | 0.8% | Nov 17, 2020 | An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could ... |
| CVE-2020-26701 | MEDIUM | 5.4 | 0.9% | Nov 17, 2020 | Cross-site scripting (XSS) vulnerability in Dashboards section in Kaa IoT Platform v1.2.0 allows remote attackers to inj... |
| CVE-2020-25400 | HIGH | 7.5 | 1.9% | Nov 17, 2020 | Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to acce... |
| CVE-2020-13351 | MEDIUM | 6.5 | 1.3% | Nov 17, 2020 | Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable names... |
| CVE-2020-13350 | MEDIUM | 4.3 | 0.7% | Nov 17, 2020 | CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instan... |
| CVE-2020-13958 | HIGH | 7.8 | 2.7% | Nov 17, 2020 | A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks po... |
| CVE-2020-27558 | MEDIUM | 6.5 | 1.1% | Nov 17, 2020 | Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video st... |
| CVE-2020-27557 | MEDIUM | 5.5 | 0.3% | Nov 17, 2020 | Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to g... |
| CVE-2020-27556 | MEDIUM | 5.3 | 1.0% | Nov 17, 2020 | A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to conne... |
| CVE-2020-27555 | CRITICAL | 9.8 | 2.5% | Nov 17, 2020 | Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers... |
| CVE-2020-27554 | HIGH | 7.5 | 0.7% | Nov 17, 2020 | Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists whi... |
| CVE-2020-27553 | HIGH | 7.5 | 1.5% | Nov 17, 2020 | In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoo... |
| CVE-2020-25798 | MEDIUM | 5.4 | 0.6% | Nov 17, 2020 | A stored cross-site scripting (XSS) vulnerability in LimeSurvey before and including 3.21.1 allows authenticated users w... |
| CVE-2020-21665 | HIGH | 7.2 | 0.9% | Nov 17, 2020 | In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be pas... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now