2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26140 | MEDIUM | 6.5 | 2.9% | May 11, 2021 | An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementat... |
| CVE-2020-26139 | MEDIUM | 5.3 | 6.5% | May 11, 2021 | An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even th... |
| CVE-2020-4536 | MEDIUM | 4.3 | 1.0% | May 11, 2021 | IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical e... |
| CVE-2020-4535 | MEDIUM | 5.4 | 0.5% | May 11, 2021 | IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary... |
| CVE-2020-20267 | MEDIUM | 6.5 | 1.7% | May 11, 2021 | Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/resolver pro... |
| CVE-2020-20265 | MEDIUM | 6.5 | 2.1% | May 11, 2021 | Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /ram/pckg/wireless/nov... |
| CVE-2020-35438 | MEDIUM | 6.1 | 0.7% | May 11, 2021 | Cross Site Scripting (XSS) vulnerability in the kk Star Ratings plugin before 4.1.5. |
| CVE-2020-23376 | MEDIUM | 6.1 | 0.4% | May 10, 2021 | NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation col... |
| CVE-2020-23374 | MEDIUM | 5.4 | 0.8% | May 10, 2021 | Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attacke... |
| CVE-2020-23373 | MEDIUM | 5.4 | 0.8% | May 10, 2021 | Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers t... |
| CVE-2020-23371 | MEDIUM | 6.1 | 0.9% | May 10, 2021 | Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCm... |
| CVE-2020-23370 | MEDIUM | 5.4 | 0.7% | May 10, 2021 | In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which... |
| CVE-2020-23369 | MEDIUM | 6.1 | 0.9% | May 10, 2021 | In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because ... |
| CVE-2020-18102 | MEDIUM | 6.1 | 1.2% | May 10, 2021 | Cross Site Scripting (XSS) in Hotels_Server v1.0 allows remote attackers to execute arbitrary code by injecting crafted ... |
| CVE-2020-28588 | MEDIUM | 5.5 | 1.1% | May 10, 2021 | An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4... |
| CVE-2020-13529 | MEDIUM | 6.1 | 1.4% | May 10, 2021 | An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cau... |
| CVE-2020-4901 | MEDIUM | 6.5 | 1.1% | May 7, 2021 | IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive ... |
| CVE-2020-14009 | MEDIUM | 6.3 | 0.3% | May 7, 2021 | Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to delive... |
| CVE-2020-36127 | MEDIUM | 6.5 | 0.7% | May 7, 2021 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by an information disclosure vulnerability. Through ... |
| CVE-2020-36124 | MEDIUM | 6.5 | 1.3% | May 7, 2021 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by XML External Entity (XXE) injection. An authentic... |
| CVE-2020-11293 | MEDIUM | 6 | 0.1% | May 7, 2021 | Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer l... |
| CVE-2020-11254 | MEDIUM | 5.5 | 0.1% | May 7, 2021 | Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid... |
| CVE-2020-29445 | MEDIUM | 4.3 | 1.2% | May 7, 2021 | Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify i... |
| CVE-2020-29444 | MEDIUM | 5.4 | 0.9% | May 7, 2021 | Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javasc... |
| CVE-2020-23263 | MEDIUM | 6.1 | 0.8% | May 6, 2021 | Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Java... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now