2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14222 | MEDIUM | 6.1 | 0.6% | Nov 5, 2020 | HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to ref... |
| CVE-2020-26506 | MEDIUM | 4.3 | 0.8% | Nov 5, 2020 | An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower priv... |
| CVE-2020-25399 | HIGH | 7.8 | 1.0% | Nov 5, 2020 | Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malic... |
| CVE-2020-25398 | HIGH | 8.8 | 2.0% | Nov 5, 2020 | CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality. |
| CVE-2020-28115 | HIGH | 8.8 | 0.9% | Nov 5, 2020 | SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arb... |
| CVE-2020-28047 | MEDIUM | 5.4 | 0.8% | Nov 5, 2020 | AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended security configuration... |
| CVE-2020-27955 | CRITICAL | 9.8 | 82.7% | Nov 5, 2020 | Git LFS 2.12.0 allows Remote Code Execution. |
| CVE-2020-27688 | HIGH | 7.5 | 1.9% | Nov 5, 2020 | RVToolsPasswordEncryption.exe in RVTools 4.0.6 allows users to encrypt passwords to be used in the configuration files. ... |
| CVE-2020-27402 | HIGH | 7.8 | 0.5% | Nov 5, 2020 | The HK1 Box S905X3 TV Box contains a vulnerability that allows a local unprivileged user to escalate to root using the /... |
| CVE-2020-24849 | HIGH | 8.8 | 3.2% | Nov 5, 2020 | A remote code execution vulnerability is identified in FruityWifi through 2.4. Due to improperly escaped shell metachara... |
| CVE-2020-15952 | CRITICAL | 9 | 1.5% | Nov 5, 2020 | Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative permi... |
| CVE-2020-15951 | MEDIUM | 6.1 | 1.0% | Nov 5, 2020 | Immuta v2.8.2 accepts user-supplied project names without properly sanitizing the input, allowing attackers to inject ar... |
| CVE-2020-15950 | HIGH | 8.8 | 1.3% | Nov 5, 2020 | Immuta v2.8.2 is affected by improper session management: user sessions are not revoked upon logout. |
| CVE-2020-15949 | HIGH | 7.5 | 1.3% | Nov 5, 2020 | Immuta v2.8.2 is affected by one instance of insecure permissions that can lead to user account takeover. |
| CVE-2020-7763 | HIGH | 7.5 | 1.6% | Nov 5, 2020 | This affects the package phantom-html-to-pdf before 0.6.1. |
| CVE-2020-7762 | MEDIUM | 6.5 | 1.6% | Nov 5, 2020 | This affects the package jsreport-chrome-pdf before 1.10.0. |
| CVE-2020-7761 | MEDIUM | 5.3 | 1.6% | Nov 5, 2020 | This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted inva... |
| CVE-2020-27387 | HIGH | 8.8 | 18.5% | Nov 5, 2020 | An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with access... |
| CVE-2020-25201 | HIGH | 7.5 | 2.6% | Nov 4, 2020 | HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cau... |
| CVE-2020-26207 | HIGH | 8 | 2.0% | Nov 4, 2020 | DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening ... |
| CVE-2020-27692 | HIGH | 8.8 | 0.5% | Nov 4, 2020 | The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within ... |
| CVE-2020-27691 | MEDIUM | 6.1 | 0.7% | Nov 4, 2020 | The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings, SNMP Sett... |
| CVE-2020-27690 | MEDIUM | 5.5 | 0.4% | Nov 4, 2020 | The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within its web mana... |
| CVE-2020-7129 | HIGH | 7.2 | 2.6% | Nov 4, 2020 | A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3... |
| CVE-2020-7128 | CRITICAL | 9.8 | 2.1% | Nov 4, 2020 | A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Pri... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now