2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-16610 | MEDIUM | 4.3 | 0.4% | Aug 28, 2020 | Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenti... |
| CVE-2020-15164 | CRITICAL | 10 | 1.2% | Aug 28, 2020 | in Scratch Login (MediaWiki extension) before version 1.1, any account can be logged into by using the same username wit... |
| CVE-2020-9298 | HIGH | 7.5 | 1.3% | Aug 28, 2020 | The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an att... |
| CVE-2020-4591 | LOW | 3.3 | 0.2% | Aug 28, 2020 | IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due... |
| CVE-2020-4559 | HIGH | 7.5 | 1.3% | Aug 28, 2020 | IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user... |
| CVE-2020-5625 | MEDIUM | 6.1 | 1.0% | Aug 28, 2020 | Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via... |
| CVE-2020-5624 | CRITICAL | 9.8 | 1.4% | Aug 28, 2020 | SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands vi... |
| CVE-2020-5623 | MEDIUM | 6.1 | 0.8% | Aug 28, 2020 | NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attacke... |
| CVE-2020-5621 | MEDIUM | 4.3 | 0.8% | Aug 28, 2020 | Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlie... |
| CVE-2020-24715 | CRITICAL | 9.8 | 0.8% | Aug 27, 2020 | The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code... |
| CVE-2020-24714 | CRITICAL | 9.8 | 1.0% | Aug 27, 2020 | The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary... |
| CVE-2020-10518 | HIGH | 8.8 | 3.7% | Aug 27, 2020 | A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a... |
| CVE-2020-10517 | MEDIUM | 4.3 | 1.1% | Aug 27, 2020 | An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of ... |
| CVE-2020-8602 | HIGH | 7.2 | 4.2% | Aug 27, 2020 | A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protecti... |
| CVE-2020-15605 | HIGH | 8.1 | 2.8% | Aug 27, 2020 | If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2... |
| CVE-2020-15601 | HIGH | 8.1 | 2.8% | Aug 27, 2020 | If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Deep Security 10.x-12.x co... |
| CVE-2020-24618 | MEDIUM | 6.5 | 1.9% | Aug 27, 2020 | In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65... |
| CVE-2020-5383 | MEDIUM | 5.3 | 1.0% | Aug 27, 2020 | Dell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale OneFS version 9.0.0 contains a buffer overflow vulnerability... |
| CVE-2020-24717 | HIGH | 7.8 | 0.5% | Aug 27, 2020 | OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by ... |
| CVE-2020-24716 | HIGH | 7.8 | 0.5% | Aug 27, 2020 | OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories. |
| CVE-2020-24203 | CRITICAL | 9.8 | 3.7% | Aug 27, 2020 | Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects Worl... |
| CVE-2020-24202 | CRITICAL | 9.8 | 2.9% | Aug 27, 2020 | File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regul... |
| CVE-2020-24196 | HIGH | 7.2 | 2.7% | Aug 27, 2020 | An Arbitrary File Upload in Vehicle Image Upload in Online Bike Rental v1.0 allows authenticated admin to conduct remote... |
| CVE-2020-3517 | HIGH | 8.6 | 1.4% | Aug 27, 2020 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an un... |
| CVE-2020-3504 | LOW | 3.3 | 0.3% | Aug 27, 2020 | A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, loc... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now