2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-2251 | MEDIUM | 4.3 | 0.5% | Sep 1, 2020 | Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain t... |
| CVE-2020-2250 | MEDIUM | 6.5 | 0.6% | Sep 1, 2020 | Jenkins SoapUI Pro Functional Testing Plugin 1.3 and earlier stores project passwords unencrypted in job config.xml file... |
| CVE-2020-2249 | LOW | 3.3 | 0.3% | Sep 1, 2020 | Jenkins Team Foundation Server Plugin 5.157.1 and earlier stores a webhook secret unencrypted in its global configuratio... |
| CVE-2020-2248 | MEDIUM | 6.1 | 0.9% | Sep 1, 2020 | Jenkins JSGames Plugin 0.2 and earlier evaluates part of a URL as code, resulting in a reflected cross-site scripting (X... |
| CVE-2020-2247 | MEDIUM | 6.5 | 0.8% | Sep 1, 2020 | Jenkins Klocwork Analysis Plugin 2020.2.1 and earlier does not configure its XML parser to prevent XML external entity (... |
| CVE-2020-2246 | MEDIUM | 5.4 | 0.8% | Sep 1, 2020 | Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored cross-si... |
| CVE-2020-2245 | HIGH | 7.1 | 0.9% | Sep 1, 2020 | Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2020-2244 | MEDIUM | 5.4 | 0.8% | Sep 1, 2020 | Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, re... |
| CVE-2020-2243 | MEDIUM | 5.4 | 0.8% | Sep 1, 2020 | Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored ... |
| CVE-2020-2242 | MEDIUM | 6.5 | 0.7% | Sep 1, 2020 | A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenki... |
| CVE-2020-2241 | HIGH | 8.8 | 0.7% | Sep 1, 2020 | A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect... |
| CVE-2020-2240 | HIGH | 8.8 | 0.7% | Sep 1, 2020 | A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute... |
| CVE-2020-2239 | MEDIUM | 4.3 | 0.5% | Sep 1, 2020 | Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration fi... |
| CVE-2020-2238 | MEDIUM | 5.4 | 0.8% | Sep 1, 2020 | Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page... |
| CVE-2020-24554 | HIGH | 7.5 | 1.8% | Sep 1, 2020 | The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is re... |
| CVE-2020-14514 | MEDIUM | 4.3 | 0.5% | Sep 1, 2020 | All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to ... |
| CVE-2020-24584 | HIGH | 7.5 | 3.3% | Sep 1, 2020 | An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used).... |
| CVE-2020-24583 | HIGH | 7.5 | 4.0% | Sep 1, 2020 | An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used).... |
| CVE-2020-8023 | HIGH | 7.8 | 0.4% | Sep 1, 2020 | A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enter... |
| CVE-2020-7727 | CRITICAL | 9.8 | 1.9% | Sep 1, 2020 | All versions of package gedi are vulnerable to Prototype Pollution via the set function. |
| CVE-2020-7726 | CRITICAL | 9.8 | 1.9% | Sep 1, 2020 | All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function. |
| CVE-2020-7725 | CRITICAL | 9.8 | 1.9% | Sep 1, 2020 | All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function. |
| CVE-2020-7724 | CRITICAL | 9.8 | 1.9% | Sep 1, 2020 | All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function. |
| CVE-2020-7723 | CRITICAL | 9.8 | 1.9% | Sep 1, 2020 | All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function. |
| CVE-2020-7722 | CRITICAL | 9.8 | 1.9% | Sep 1, 2020 | All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now