2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25249 | MEDIUM | 5.3 | 0.8% | Sep 11, 2020 | An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 an... |
| CVE-2020-25248 | HIGH | 7.5 | 2.1% | Sep 11, 2020 | An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16... |
| CVE-2020-25247 | HIGH | 7.5 | 1.5% | Sep 11, 2020 | An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for ... |
| CVE-2020-15171 | MEDIUM | 6.6 | 1.3% | Sep 10, 2020 | In XWiki before versions 11.10.5 or 12.2.1, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to ... |
| CVE-2020-9731 | HIGH | 7.8 | 11.3% | Sep 10, 2020 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious ind... |
| CVE-2020-9730 | HIGH | 7.8 | 2.7% | Sep 10, 2020 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious ind... |
| CVE-2020-9729 | HIGH | 7.8 | 2.7% | Sep 10, 2020 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious ind... |
| CVE-2020-9728 | HIGH | 7.8 | 2.7% | Sep 10, 2020 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious ind... |
| CVE-2020-9727 | HIGH | 7.8 | 3.1% | Sep 10, 2020 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious ind... |
| CVE-2020-9726 | MEDIUM | 6.1 | 2.7% | Sep 10, 2020 | Adobe FrameMaker version 2019.0.6 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited... |
| CVE-2020-9725 | HIGH | 7.8 | 3.7% | Sep 10, 2020 | Adobe FrameMaker version 2019.0.6 (and earlier versions) lacks proper validation of the length of user-supplied data pri... |
| CVE-2020-15170 | HIGH | 7 | 1.3% | Sep 10, 2020 | apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to inte... |
| CVE-2020-15168 | MEDIUM | 5.3 | 1.7% | Sep 10, 2020 | node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means ... |
| CVE-2020-13920 | MEDIUM | 5.9 | 4.6% | Sep 10, 2020 | Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi"... |
| CVE-2020-11998 | CRITICAL | 9.8 | 51.2% | Sep 10, 2020 | A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnect... |
| CVE-2020-15024 | MEDIUM | 5.5 | 0.3% | Sep 10, 2020 | An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562... |
| CVE-2020-9743 | MEDIUM | 6.1 | 2.0% | Sep 10, 2020 | AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by... |
| CVE-2020-9742 | MEDIUM | 5.4 | 1.8% | Sep 10, 2020 | AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below) and 6.3.3.8 (and below) are affected by a stored XSS vulnerability... |
| CVE-2020-9741 | MEDIUM | 5.4 | 1.9% | Sep 10, 2020 | The AEM forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) is affected by a stored XSS vulnerability ... |
| CVE-2020-9740 | MEDIUM | 5.4 | 1.9% | Sep 10, 2020 | AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by... |
| CVE-2020-9738 | MEDIUM | 4.8 | 1.7% | Sep 10, 2020 | AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by... |
| CVE-2020-9737 | MEDIUM | 4.8 | 1.7% | Sep 10, 2020 | AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by... |
| CVE-2020-9736 | MEDIUM | 4.8 | 1.8% | Sep 10, 2020 | AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by... |
| CVE-2020-9735 | MEDIUM | 4.8 | 1.8% | Sep 10, 2020 | AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by... |
| CVE-2020-9734 | MEDIUM | 5.4 | 1.9% | Sep 10, 2020 | The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.1 (and below) is affected by a stored XSS vulnerability ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now