2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3918 | MEDIUM | 5.5 | 0.3% | Oct 22, 2020 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, mac... |
| CVE-2020-3915 | HIGH | 7.8 | 0.3% | Oct 22, 2020 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A malicious... |
| CVE-2020-3898 | HIGH | 7.8 | 0.4% | Oct 22, 2020 | A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An appl... |
| CVE-2020-15906 | CRITICAL | 9.8 | 27.4% | Oct 22, 2020 | tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts. |
| CVE-2020-7020 | LOW | 3.1 | 1.0% | Oct 22, 2020 | Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security ... |
| CVE-2020-27195 | CRITICAL | 9.1 | 1.5% | Oct 22, 2020 | HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using eithe... |
| CVE-2020-27155 | HIGH | 7.5 | 1.3% | Oct 22, 2020 | An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted te... |
| CVE-2020-27533 | MEDIUM | 5.4 | 3.5% | Oct 22, 2020 | A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to ... |
| CVE-2020-26650 | MEDIUM | 5.3 | 1.0% | Oct 22, 2020 | AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php |
| CVE-2020-26649 | HIGH | 8.1 | 0.7% | Oct 22, 2020 | AtomXCMS 2.0 is affected by Incorrect Access Control via admin/dump.php |
| CVE-2020-27646 | MEDIUM | 6.5 | 1.0% | Oct 22, 2020 | Biscom Secure File Transfer (SFT) before 5.1.1082 and 6.x before 6.0.1011 allows user credential theft. |
| CVE-2020-27560 | LOW | 3.3 | 1.5% | Oct 22, 2020 | ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which may cause a denial of ... |
| CVE-2020-24033 | HIGH | 8.8 | 1.0% | Oct 22, 2020 | An issue was discovered in fs.com S3900 24T4S 1.7.0 and earlier. The form does not have an authentication or token authe... |
| CVE-2020-27642 | MEDIUM | 6.1 | 0.7% | Oct 22, 2020 | A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Gre... |
| CVE-2020-27638 | HIGH | 7.5 | 2.3% | Oct 22, 2020 | receive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets with an invalid type c... |
| CVE-2020-27621 | MEDIUM | 4.3 | 0.7% | Oct 22, 2020 | The FileImporter extension in MediaWiki through 1.35.0 was not properly attributing various user actions to a specific u... |
| CVE-2020-27620 | MEDIUM | 6.1 | 0.9% | Oct 22, 2020 | The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped. ... |
| CVE-2020-27619 | CRITICAL | 9.8 | 8.3% | Oct 22, 2020 | In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via H... |
| CVE-2020-24421 | MEDIUM | 5.5 | 1.8% | Oct 21, 2020 | Adobe InDesign version 15.1.2 (and earlier) is affected by a NULL pointer dereference bug that occurs when handling a ma... |
| CVE-2020-17454 | MEDIUM | 6.1 | 0.8% | Oct 21, 2020 | WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface. More precisely, it ... |
| CVE-2020-17355 | HIGH | 7.5 | 1.2% | Oct 21, 2020 | Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attack... |
| CVE-2020-27615 | CRITICAL | 9.8 | 53.6% | Oct 21, 2020 | The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_fa... |
| CVE-2020-24425 | HIGH | 7.8 | 0.7% | Oct 21, 2020 | Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead ... |
| CVE-2020-24424 | HIGH | 7.8 | 1.1% | Oct 21, 2020 | Adobe Premiere Pro version 14.4 (and earlier) is affected by an uncontrolled search path element that could result in ar... |
| CVE-2020-24423 | HIGH | 7.8 | 1.1% | Oct 21, 2020 | Adobe Media Encoder version 14.4 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now