2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14375 | HIGH | 7.8 | 0.3% | Sep 30, 2020 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they desc... |
| CVE-2020-8256 | MEDIUM | 4.9 | 3.4% | Sep 30, 2020 | A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain ... |
| CVE-2020-8243 | HIGH | 7.2 | 90.8% | Sep 30, 2020 | A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to uploa... |
| CVE-2020-8238 | MEDIUM | 6.1 | 1.7% | Sep 30, 2020 | A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could ... |
| CVE-2020-26163 | HIGH | 8.8 | 1.5% | Sep 30, 2020 | BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover... |
| CVE-2020-26160 | HIGH | 7.5 | 2.1% | Sep 30, 2020 | jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m... |
| CVE-2020-26158 | CRITICAL | 9.6 | 1.9% | Sep 30, 2020 | Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This ... |
| CVE-2020-26157 | CRITICAL | 9.6 | 1.9% | Sep 30, 2020 | Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code ... |
| CVE-2020-26154 | CRITICAL | 9.8 | 3.6% | Sep 30, 2020 | url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC fil... |
| CVE-2020-26150 | HIGH | 7.5 | 1.3% | Sep 30, 2020 | info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct reques... |
| CVE-2020-26149 | HIGH | 7.5 | 1.5% | Sep 30, 2020 | NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and nats.deno before 1.0.0-9 allow credential disclosure from a... |
| CVE-2020-26148 | HIGH | 7.5 | 1.4% | Sep 30, 2020 | md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial ... |
| CVE-2020-26137 | MEDIUM | 6.5 | 2.2% | Sep 30, 2020 | urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserti... |
| CVE-2020-26053 | — | — | — | Sep 30, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-26043 | MEDIUM | 6.1 | 0.7% | Sep 30, 2020 | An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php |
| CVE-2020-26042 | CRITICAL | 9.8 | 1.2% | Sep 30, 2020 | An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php |
| CVE-2020-26041 | CRITICAL | 9.8 | 2.8% | Sep 30, 2020 | An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php |
| CVE-2020-25763 | CRITICAL | 9.8 | 5.0% | Sep 30, 2020 | Seat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability allowing Remote Attackers ... |
| CVE-2020-25762 | CRITICAL | 9.1 | 11.3% | Sep 30, 2020 | An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input v... |
| CVE-2020-25761 | MEDIUM | 6.1 | 1.8% | Sep 30, 2020 | Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on ... |
| CVE-2020-25760 | HIGH | 8.8 | 2.2% | Sep 30, 2020 | Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection. The file front.php does not perform input valid... |
| CVE-2020-24721 | MEDIUM | 5.7 | 0.3% | Sep 30, 2020 | An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in CO... |
| CVE-2020-24570 | MEDIUM | 6.5 | 0.5% | Sep 30, 2020 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resu... |
| CVE-2020-24569 | MEDIUM | 4.3 | 0.7% | Sep 30, 2020 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection i... |
| CVE-2020-22842 | MEDIUM | 5.4 | 0.5% | Sep 30, 2020 | CMS Made Simple before 2.2.15 allows XSS via the m1_mod parameter in a ModuleManager local_uninstall action to admin/mod... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now