2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15255 | HIGH | 7.3 | 3.5% | Oct 16, 2020 | In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could... |
| CVE-2020-15254 | CRITICAL | 9.8 | 2.7% | Oct 16, 2020 | Crossbeam is a set of tools for concurrent programming. In crossbeam-channel before version 0.4.4, the bounded channel i... |
| CVE-2020-15252 | HIGH | 8.8 | 3.2% | Oct 16, 2020 | In XWiki before version 12.5 and 11.10.6, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to th... |
| CVE-2020-15157 | MEDIUM | 6.1 | 2.2% | Oct 16, 2020 | In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability... |
| CVE-2020-27178 | HIGH | 7.5 | 1.2% | Oct 16, 2020 | Apereo CAS 5.3.x before 5.3.16, 6.x before 6.1.7.2, 6.2.x before 6.2.4, and 6.3.x before 6.3.0-RC4 mishandles secret key... |
| CVE-2020-26672 | MEDIUM | 5.4 | 0.7% | Oct 16, 2020 | Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin/post.php. If a user in... |
| CVE-2020-24408 | MEDIUM | 6.1 | 1.7% | Oct 16, 2020 | Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upl... |
| CVE-2020-3991 | HIGH | 7.1 | 0.3% | Oct 16, 2020 | VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system acc... |
| CVE-2020-26944 | CRITICAL | 9.8 | 1.1% | Oct 16, 2020 | An issue was discovered in Aptean Product Configurator 4.61.0000 on Windows. A Time based SQL injection affects the name... |
| CVE-2020-26682 | HIGH | 8.8 | 1.8% | Oct 16, 2020 | In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow. |
| CVE-2020-16270 | MEDIUM | 6.1 | 13.1% | Oct 16, 2020 | OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject mal... |
| CVE-2020-15867 | HIGH | 7.2 | 87.5% | Oct 16, 2020 | The git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remote code execution. There can be a privile... |
| CVE-2020-14299 | MEDIUM | 6.5 | 1.4% | Oct 16, 2020 | A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegat... |
| CVE-2020-14144 | HIGH | 7.2 | 93.7% | Oct 16, 2020 | The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer envir... |
| CVE-2020-26893 | HIGH | 7.8 | 0.2% | Oct 16, 2020 | An issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed copy of ClamXAV 2 (runn... |
| CVE-2020-26943 | CRITICAL | 9.9 | 3.1% | Oct 16, 2020 | An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. A user allowed to access the Blaza... |
| CVE-2020-26584 | MEDIUM | 6.1 | 0.9% | Oct 16, 2020 | An issue was discovered in Sage DPW 2020_06_x before 2020_06_002. The search field "Kurs suchen" on the page Kurskatalog... |
| CVE-2020-26583 | MEDIUM | 6.1 | 1.0% | Oct 16, 2020 | An issue was discovered in Sage DPW 2020_06_x before 2020_06_002. It allows unauthenticated users to upload JavaScript (... |
| CVE-2020-25829 | HIGH | 7.5 | 6.5% | Oct 16, 2020 | An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacke... |
| CVE-2020-24352 | MEDIUM | 5.5 | 0.4% | Oct 16, 2020 | An issue was discovered in QEMU through 5.1.0. An out-of-bounds memory access was found in the ATI VGA device implementa... |
| CVE-2020-27176 | CRITICAL | 9.6 | 1.8% | Oct 16, 2020 | Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a du... |
| CVE-2020-27174 | HIGH | 7.5 | 1.7% | Oct 16, 2020 | In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage w... |
| CVE-2020-27173 | HIGH | 7.5 | 1.5% | Oct 16, 2020 | In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input so... |
| CVE-2020-27163 | MEDIUM | 6.1 | 0.7% | Oct 16, 2020 | phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter. |
| CVE-2020-14185 | MEDIUM | 5.3 | 1.9% | Oct 15, 2020 | Affected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys via a missing permission... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now