2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15959 | MEDIUM | 4.3 | 1.2% | Sep 21, 2020 | Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced ... |
| CVE-2020-4643 | HIGH | 7.5 | 2.8% | Sep 21, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack w... |
| CVE-2020-4731 | MEDIUM | 6.1 | 0.7% | Sep 21, 2020 | IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar... |
| CVE-2020-4590 | MEDIUM | 6.5 | 1.2% | Sep 21, 2020 | IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server f... |
| CVE-2020-4581 | HIGH | 7.5 | 1.6% | Sep 21, 2020 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sendi... |
| CVE-2020-4580 | HIGH | 7.5 | 1.6% | Sep 21, 2020 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sendi... |
| CVE-2020-4579 | HIGH | 7.5 | 2.2% | Sep 21, 2020 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sendi... |
| CVE-2020-4315 | MEDIUM | 4.3 | 1.2% | Sep 21, 2020 | IBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on authorization tokens or sessi... |
| CVE-2020-16171 | MEDIUM | 6.5 | 5.5% | Sep 21, 2020 | An issue was discovered in Acronis Cyber Backup before 12.5 Build 16342. Some API endpoints on port 9877 under /api/ams/... |
| CVE-2020-14180 | MEDIUM | 4.3 | 0.8% | Sep 21, 2020 | Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-ad... |
| CVE-2020-14179 | MEDIUM | 5.3 | 76.0% | Sep 21, 2020 | Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field ... |
| CVE-2020-14177 | MEDIUM | 6.5 | 2.2% | Sep 21, 2020 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availabili... |
| CVE-2020-25796 | HIGH | 7.5 | 1.6% | Sep 19, 2020 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligne... |
| CVE-2020-25795 | HIGH | 7.5 | 1.7% | Sep 19, 2020 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, insert_from can h... |
| CVE-2020-25794 | HIGH | 7.5 | 1.7% | Sep 19, 2020 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a ... |
| CVE-2020-25793 | HIGH | 7.5 | 1.6% | Sep 19, 2020 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is... |
| CVE-2020-25792 | HIGH | 7.5 | 2.8% | Sep 19, 2020 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is... |
| CVE-2020-25791 | HIGH | 7.5 | 1.7% | Sep 19, 2020 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is... |
| CVE-2020-25790 | HIGH | 7.2 | 15.6% | Sep 19, 2020 | Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archi... |
| CVE-2020-25789 | MEDIUM | 6.1 | 0.9% | Sep 19, 2020 | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript in... |
| CVE-2020-25788 | HIGH | 8.1 | 1.2% | Sep 19, 2020 | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mish... |
| CVE-2020-25787 | CRITICAL | 9.8 | 18.4% | Sep 19, 2020 | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requesting... |
| CVE-2020-25786 | MEDIUM | 6.1 | 1.0% | Sep 19, 2020 | webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header.... |
| CVE-2020-5421 | MEDIUM | 6.5 | 10.7% | Sep 19, 2020 | In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versio... |
| CVE-2020-8253 | HIGH | 7.5 | 1.7% | Sep 18, 2020 | Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix Xe... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now