2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-24115 | CRITICAL | 9.8 | 2.0% | Aug 31, 2020 | In projectworlds Online Book Store 1.0 Use of Hard-coded Credentials in source code leads to admin panel access. |
| CVE-2020-4492 | MEDIUM | 5.5 | 0.3% | Aug 31, 2020 | IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a deni... |
| CVE-2020-15020 | MEDIUM | 5.4 | 0.7% | Aug 31, 2020 | An issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated attacker can achieve stor... |
| CVE-2020-25033 | MEDIUM | 6.1 | 1.0% | Aug 31, 2020 | The Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows subscribe_sidebar.php&status= re... |
| CVE-2020-25032 | HIGH | 7.5 | 4.0% | Aug 31, 2020 | An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to... |
| CVE-2020-25031 | HIGH | 7.8 | 0.5% | Aug 31, 2020 | checkinstall 1.6.2, when used to create a package that contains a symlink, may trigger the creation of a mode 0777 execu... |
| CVE-2020-24104 | MEDIUM | 6.1 | 0.8% | Aug 30, 2020 | XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials wit... |
| CVE-2020-8097 | HIGH | 7.8 | 0.4% | Aug 30, 2020 | An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Sec... |
| CVE-2020-24223 | MEDIUM | 6.1 | 14.6% | Aug 30, 2020 | Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters. |
| CVE-2020-24917 | MEDIUM | 6.1 | 1.2% | Aug 30, 2020 | osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php... |
| CVE-2020-8244 | MEDIUM | 6.5 | 2.1% | Aug 30, 2020 | A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply... |
| CVE-2020-14352 | HIGH | 8 | 2.5% | Aug 30, 2020 | A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to ... |
| CVE-2020-7712 | HIGH | 7.2 | 3.1% | Aug 30, 2020 | This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function. |
| CVE-2020-24972 | HIGH | 8.8 | 4.7% | Aug 29, 2020 | The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code ... |
| CVE-2020-24928 | MEDIUM | 5.3 | 0.9% | Aug 29, 2020 | managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server (port 3020) open to all origi... |
| CVE-2020-24898 | MEDIUM | 6.5 | 0.7% | Aug 29, 2020 | The Table Filter and Charts for Confluence Server app before 5.3.26 (for Atlassian Confluence) allows SSRF via the "Tabl... |
| CVE-2020-24897 | HIGH | 8.9 | 0.9% | Aug 29, 2020 | The Table Filter and Charts for Confluence Server app before 5.3.25 (for Atlassian Confluence) allow remote attackers to... |
| CVE-2020-25020 | CRITICAL | 9.8 | 2.6% | Aug 29, 2020 | MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components. |
| CVE-2020-25019 | HIGH | 7.5 | 1.0% | Aug 29, 2020 | jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verify... |
| CVE-2020-3566 | HIGH | 8.6 | 4.0% | Aug 29, 2020 | A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow a... |
| CVE-2020-25016 | CRITICAL | 9.1 | 1.6% | Aug 29, 2020 | A safety violation was discovered in the rgb crate before 0.8.20 for Rust, leading to (for example) dereferencing of arb... |
| CVE-2020-15159 | HIGH | 7.6 | 2.2% | Aug 28, 2020 | baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE). This may be execut... |
| CVE-2020-15155 | HIGH | 7.3 | 1.3% | Aug 28, 2020 | baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is req... |
| CVE-2020-15154 | HIGH | 7.3 | 1.0% | Aug 28, 2020 | baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is req... |
| CVE-2020-15165 | CRITICAL | 9.1 | 1.3% | Aug 28, 2020 | Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it's sources or permissions tampere... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now