2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-16844 | MEDIUM | 6.8 | 1.1% | Oct 1, 2020 | In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY ... |
| CVE-2020-4576 | HIGH | 7.5 | 2.0% | Oct 1, 2020 | IBM WebSphere Application Server 7.5, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive in... |
| CVE-2020-25990 | CRITICAL | 9.8 | 1.6% | Oct 1, 2020 | WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Explo... |
| CVE-2020-24861 | MEDIUM | 5.4 | 0.9% | Oct 1, 2020 | GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is execu... |
| CVE-2020-24860 | MEDIUM | 5.4 | 1.1% | Oct 1, 2020 | CMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit content and put persisten... |
| CVE-2020-8109 | HIGH | 7.5 | 0.9% | Oct 1, 2020 | A vulnerability has been discovered in the ace.xmd parser that results from a lack of proper validation of user-supplied... |
| CVE-2020-6654 | HIGH | 7.8 | 0.4% | Sep 30, 2020 | A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attac... |
| CVE-2020-26159 | — | — | — | Sep 30, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a secu... |
| CVE-2020-25830 | MEDIUM | 4.8 | 1.7% | Sep 30, 2020 | An issue was discovered in MantisBT before 2.24.3. Improper escaping of a custom field's name allows an attacker to inje... |
| CVE-2020-25781 | MEDIUM | 4.3 | 0.9% | Sep 30, 2020 | An issue was discovered in file_download.php in MantisBT before 2.24.3. Users without access to view private issue notes... |
| CVE-2020-25288 | MEDIUM | 4.8 | 1.5% | Sep 30, 2020 | An issue was discovered in MantisBT before 2.24.3. When editing an Issue in a Project where a Custom Field with a crafte... |
| CVE-2020-16234 | HIGH | 7.8 | 1.3% | Sep 30, 2020 | In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid us... |
| CVE-2020-13952 | HIGH | 8.1 | 2.0% | Sep 30, 2020 | In the course of work on the open source project it was discovered that authenticated users running queries against Hive... |
| CVE-2020-13336 | MEDIUM | 4.8 | 0.5% | Sep 30, 2020 | An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. GitLab was vulnerable to a stored X... |
| CVE-2020-12870 | CRITICAL | 9.8 | 1.6% | Sep 30, 2020 | RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page. |
| CVE-2020-12869 | MEDIUM | 5.4 | 0.6% | Sep 30, 2020 | RainbowFish PacsOne Server 6.8.4 allows XSS. |
| CVE-2020-12715 | HIGH | 8.8 | 1.2% | Sep 30, 2020 | RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control. |
| CVE-2020-25816 | MEDIUM | 6.8 | 1.0% | Sep 30, 2020 | HashiCorp Vault and Vault Enterprise versions 1.0 and newer allowed leases created with a batch token to outlive their T... |
| CVE-2020-25626 | MEDIUM | 6.1 | 1.3% | Sep 30, 2020 | A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer... |
| CVE-2020-14374 | HIGH | 8.8 | 0.4% | Sep 30, 2020 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data funct... |
| CVE-2020-15849 | HIGH | 7.2 | 2.7% | Sep 30, 2020 | Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTem... |
| CVE-2020-15488 | HIGH | 7.5 | 1.0% | Sep 30, 2020 | Re:Desk 2.3 allows insecure file upload. |
| CVE-2020-14378 | LOW | 3.3 | 0.4% | Sep 30, 2020 | An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large a... |
| CVE-2020-14377 | HIGH | 7.1 | 0.4% | Sep 30, 2020 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-contr... |
| CVE-2020-14376 | HIGH | 7.8 | 0.4% | Sep 30, 2020 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now