2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13347 | CRITICAL | 9.1 | 2.3% | Oct 7, 2020 | A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the ... |
| CVE-2020-13346 | MEDIUM | 6.5 | 1.3% | Oct 7, 2020 | Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allow... |
| CVE-2020-13335 | MEDIUM | 4.3 | 0.8% | Oct 7, 2020 | Improper group membership validation when deleting a user account in GitLab >=7.12 allows a user to delete own account w... |
| CVE-2020-13334 | HIGH | 7.5 | 1.5% | Oct 7, 2020 | In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/gr... |
| CVE-2020-13332 | — | — | — | Oct 7, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-25985 | HIGH | 8.1 | 1.7% | Oct 7, 2020 | MonoCMS Blog 1.0 is affected by: Arbitrary File Deletion. Any authenticated user can delete files on and off the webserv... |
| CVE-2020-7742 | HIGH | 7.5 | 1.5% | Oct 7, 2020 | This affects the package simpl-schema before 1.10.2. |
| CVE-2020-14183 | MEDIUM | 4.3 | 1.3% | Oct 6, 2020 | Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Jir... |
| CVE-2020-26607 | CRITICAL | 9.8 | 0.5% | Oct 6, 2020 | An issue was discovered in TimaService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingInten... |
| CVE-2020-26606 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. An attacker can ac... |
| CVE-2020-26605 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Exynos chipsets) software. They allow attack... |
| CVE-2020-26604 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered in SystemUI on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Pendin... |
| CVE-2020-26603 | MEDIUM | 5.3 | 0.5% | Oct 6, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Sticker Center allows direc... |
| CVE-2020-26602 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered in EthernetNetwork on Samsung mobile devices with O(8.1), P(9.0), Q(10.0), and R(11.0) software.... |
| CVE-2020-26601 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered in DirEncryptService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Pendin... |
| CVE-2020-26600 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Auto Hotspot allows attackers to obtain sensiti... |
| CVE-2020-26599 | MEDIUM | 5.3 | 0.3% | Oct 6, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) software. The DynamicLockscreen Terms and Conditions can ... |
| CVE-2020-26598 | HIGH | 7.5 | 0.3% | Oct 6, 2020 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, and 9.0 software. The Network Management componen... |
| CVE-2020-26597 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered on LG mobile devices with Android OS 9.0 and 10 software. The Wi-Fi subsystem has incorrect inpu... |
| CVE-2020-16267 | HIGH | 8.8 | 43.3% | Oct 6, 2020 | Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp r... |
| CVE-2020-15927 | HIGH | 8.8 | 40.3% | Oct 6, 2020 | Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp r... |
| CVE-2020-15239 | LOW | 3.5 | 1.5% | Oct 6, 2020 | In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can read files which have a `.data`... |
| CVE-2020-13345 | MEDIUM | 5.4 | 0.9% | Oct 6, 2020 | An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes |
| CVE-2020-13343 | HIGH | 8.8 | 1.5% | Oct 6, 2020 | An issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized Users Can View Custom Pro... |
| CVE-2020-13333 | MEDIUM | 4.3 | 2.1% | Oct 6, 2020 | A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a lin... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now