2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8189 | MEDIUM | 5.4 | 1.4% | Aug 21, 2020 | A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when ... |
| CVE-2020-15858 | MEDIUM | 6.4 | 0.8% | Aug 21, 2020 | Some devices of Thales DIS (formerly Gemalto, formerly Cinterion) allow Directory Traversal by physically proximate atta... |
| CVE-2020-10126 | HIGH | 7.6 | 0.3% | Aug 21, 2020 | NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA),... |
| CVE-2020-10125 | HIGH | 7.6 | 0.2% | Aug 21, 2020 | NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acce... |
| CVE-2020-10124 | HIGH | 7.1 | 0.7% | Aug 21, 2020 | NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between t... |
| CVE-2020-10123 | MEDIUM | 5.3 | 0.4% | Aug 21, 2020 | The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate sessio... |
| CVE-2020-24591 | MEDIUM | 6.5 | 1.0% | Aug 21, 2020 | The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates. This affects API Manage... |
| CVE-2020-24590 | CRITICAL | 9.1 | 1.3% | Aug 21, 2020 | The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks. |
| CVE-2020-24589 | CRITICAL | 9.1 | 26.9% | Aug 21, 2020 | The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection... |
| CVE-2020-14201 | MEDIUM | 6.5 | 1.6% | Aug 21, 2020 | Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitr... |
| CVE-2020-5775 | MEDIUM | 5.8 | 6.5% | Aug 21, 2020 | Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas appli... |
| CVE-2020-3975 | MEDIUM | 5.4 | 0.5% | Aug 21, 2020 | VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting (XSS... |
| CVE-2020-15147 | HIGH | 8.5 | 2.0% | Aug 21, 2020 | Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exp... |
| CVE-2020-15140 | CRITICAL | 9.6 | 0.9% | Aug 21, 2020 | In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Di... |
| CVE-2020-20633 | MEDIUM | 5.4 | 0.9% | Aug 21, 2020 | ajax_policy_generator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Conse... |
| CVE-2020-7923 | MEDIUM | 6.5 | 1.3% | Aug 21, 2020 | A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which vi... |
| CVE-2020-24057 | HIGH | 8.8 | 5.5% | Aug 21, 2020 | The management website of the Verint S5120FD Verint_FW_0_42 unit features a CGI endpoint ('ipfilter.cgi') that allows th... |
| CVE-2020-24056 | HIGH | 7.5 | 1.2% | Aug 21, 2020 | A hardcoded credentials vulnerability exists in Verint 5620PTZ Verint_FW_0_42, Verint 4320 V4320_FW_0_23, V4320_FW_0_31,... |
| CVE-2020-24055 | CRITICAL | 9.8 | 1.6% | Aug 21, 2020 | Verint 5620PTZ Verint_FW_0_42 and Verint 4320 V4320_FW_0_23, and V4320_FW_0_31 units feature an autodiscovery service im... |
| CVE-2020-24054 | CRITICAL | 9.8 | 2.6% | Aug 21, 2020 | The administration console of the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units features a 'statusbroadcast' command that... |
| CVE-2020-24053 | HIGH | 7.5 | 1.2% | Aug 21, 2020 | Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidential... |
| CVE-2020-24052 | CRITICAL | 9.1 | 1.9% | Aug 21, 2020 | Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unaut... |
| CVE-2020-24051 | CRITICAL | 9.8 | 2.2% | Aug 21, 2020 | The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol,... |
| CVE-2020-20634 | MEDIUM | 6.5 | 1.0% | Aug 21, 2020 | Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode feature. This can be exp... |
| CVE-2020-10290 | MEDIUM | 6.8 | 0.4% | Aug 21, 2020 | Universal Robots controller execute URCaps (zip files containing Java-powered applications) without any permission restr... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now