2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27689 | CRITICAL | 9.8 | 2.2% | Nov 4, 2020 | The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin credential... |
| CVE-2020-28049 | MEDIUM | 6.3 | 0.4% | Nov 4, 2020 | An issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that - for a short time perio... |
| CVE-2020-8037 | HIGH | 7.5 | 3.1% | Nov 4, 2020 | The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. |
| CVE-2020-8036 | HIGH | 7.5 | 1.4% | Nov 4, 2020 | The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way. |
| CVE-2020-22274 | CRITICAL | 9.8 | 1.6% | Nov 4, 2020 | JomSocial (Joomla Social Network Extention) 4.7.6 allows CSV injection via a customer's profile. |
| CVE-2020-22273 | MEDIUM | 6.5 | 0.4% | Nov 4, 2020 | Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's Settings to be changed (suc... |
| CVE-2020-26167 | CRITICAL | 9.8 | 3.5% | Nov 4, 2020 | In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any acco... |
| CVE-2020-22278 | HIGH | 8.8 | 1.5% | Nov 4, 2020 | phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file i... |
| CVE-2020-22277 | HIGH | 8 | 1.8% | Nov 4, 2020 | Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile. |
| CVE-2020-22276 | CRITICAL | 9.8 | 3.0% | Nov 4, 2020 | WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry. |
| CVE-2020-22275 | HIGH | 8.8 | 2.1% | Nov 4, 2020 | Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV comma... |
| CVE-2020-2319 | MEDIUM | 6.5 | 1.0% | Nov 4, 2020 | Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier stores a password unencrypted in the global config.xml file o... |
| CVE-2020-2318 | MEDIUM | 6.5 | 1.0% | Nov 4, 2020 | Jenkins Mail Commander Plugin for Jenkins-ci Plugin 1.0.0 and earlier stores passwords unencrypted in job config.xml fil... |
| CVE-2020-2317 | MEDIUM | 5.4 | 0.9% | Nov 4, 2020 | Jenkins FindBugs Plugin 5.0.0 and earlier does not escape the annotation message in tooltips, resulting in a stored cros... |
| CVE-2020-2316 | MEDIUM | 5.4 | 0.7% | Nov 4, 2020 | Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting ... |
| CVE-2020-2315 | MEDIUM | 6.5 | 1.1% | Nov 4, 2020 | Jenkins Visualworks Store Plugin 1.1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE... |
| CVE-2020-2314 | MEDIUM | 5.5 | 0.3% | Nov 4, 2020 | Jenkins AppSpider Plugin 1.0.12 and earlier stores a password unencrypted in its global configuration file on the Jenkin... |
| CVE-2020-2313 | MEDIUM | 4.3 | 0.8% | Nov 4, 2020 | A missing permission check in Jenkins Azure Key Vault Plugin 2.0 and earlier allows attackers with Overall/Read permissi... |
| CVE-2020-2312 | MEDIUM | 6.5 | 1.0% | Nov 4, 2020 | Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier does not mask a password provided as command line argument in bu... |
| CVE-2020-2311 | MEDIUM | 4.3 | 0.8% | Nov 4, 2020 | A missing permission check in Jenkins AWS Global Configuration Plugin 1.5 and earlier allows attackers with Overall/Read... |
| CVE-2020-2310 | MEDIUM | 4.3 | 0.8% | Nov 4, 2020 | Missing permission checks in Jenkins Ansible Plugin 1.0 and earlier allow attackers with Overall/Read permission to enum... |
| CVE-2020-2309 | MEDIUM | 4.3 | 1.1% | Nov 4, 2020 | A missing/An incorrect permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Re... |
| CVE-2020-2308 | MEDIUM | 4.3 | 1.1% | Nov 4, 2020 | A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission... |
| CVE-2020-2307 | MEDIUM | 4.3 | 1.2% | Nov 4, 2020 | Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins controller ... |
| CVE-2020-2306 | MEDIUM | 4.3 | 1.1% | Nov 4, 2020 | A missing permission check in Jenkins Mercurial Plugin 2.11 and earlier allows attackers with Overall/Read permission to... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now