2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14027 | MEDIUM | 5.3 | 0.8% | Sep 22, 2020 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The database connection strings accept custom unsafe arg... |
| CVE-2020-14026 | HIGH | 8.8 | 1.7% | Sep 22, 2020 | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS ... |
| CVE-2020-14025 | HIGH | 8.8 | 0.5% | Sep 22, 2020 | Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an administrator, by following a lin... |
| CVE-2020-14024 | MEDIUM | 6.1 | 0.7% | Sep 22, 2020 | Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via the (1) R... |
| CVE-2020-14023 | MEDIUM | 4.9 | 1.0% | Sep 22, 2020 | Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS. |
| CVE-2020-14022 | HIGH | 8.8 | 1.8% | Sep 22, 2020 | Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contac... |
| CVE-2020-25487 | HIGH | 7.8 | 0.6% | Sep 22, 2020 | PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection via zms/animal-detail.php... |
| CVE-2020-24333 | MEDIUM | 6.5 | 0.8% | Sep 22, 2020 | A vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only” or greater access rig... |
| CVE-2020-16202 | HIGH | 7.8 | 0.4% | Sep 22, 2020 | WebAccess Node (All versions prior to 9.0.1) has incorrect permissions set for resources used by specific services, whic... |
| CVE-2020-11856 | CRITICAL | 9.8 | 5.2% | Sep 22, 2020 | Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. Th... |
| CVE-2020-4622 | HIGH | 7.5 | 1.2% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it us... |
| CVE-2020-4621 | HIGH | 8.8 | 1.3% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due t... |
| CVE-2020-4620 | HIGH | 8.8 | 5.2% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the ... |
| CVE-2020-4619 | MEDIUM | 6.5 | 0.7% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated ... |
| CVE-2020-4618 | MEDIUM | 4.9 | 1.1% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input vali... |
| CVE-2020-4617 | HIGH | 8.1 | 0.6% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute ... |
| CVE-2020-4616 | MEDIUM | 5.3 | 1.7% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafte... |
| CVE-2020-4615 | MEDIUM | 5.4 | 0.7% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2020-4614 | HIGH | 7.5 | 0.8% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to de... |
| CVE-2020-4613 | HIGH | 7.5 | 0.9% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to de... |
| CVE-2020-4612 | MEDIUM | 6.5 | 1.3% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially c... |
| CVE-2020-4611 | HIGH | 8.8 | 1.6% | Sep 22, 2020 | IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and execute actions reserved for... |
| CVE-2020-3977 | MEDIUM | 6.5 | 1.0% | Sep 22, 2020 | VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in ... |
| CVE-2020-23446 | MEDIUM | 5.3 | 1.5% | Sep 22, 2020 | Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure via API |
| CVE-2020-11857 | CRITICAL | 9.8 | 15.8% | Sep 22, 2020 | An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now