2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6164 | HIGH | 7.5 | 1.8% | Jul 15, 2020 | In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can b... |
| CVE-2020-15779 | HIGH | 7.5 | 1.6% | Jul 15, 2020 | A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js. The socket.io-file::crea... |
| CVE-2020-15051 | MEDIUM | 6.1 | 2.5% | Jul 15, 2020 | An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Add... |
| CVE-2020-14982 | MEDIUM | 6.5 | 1.3% | Jul 15, 2020 | A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352prem... |
| CVE-2020-13788 | MEDIUM | 4.3 | 1.3% | Jul 15, 2020 | Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of ... |
| CVE-2020-10285 | CRITICAL | 9.8 | 1.3% | Jul 15, 2020 | The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force att... |
| CVE-2020-15718 | MEDIUM | 6.1 | 6.3% | Jul 15, 2020 | RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php sc... |
| CVE-2020-15603 | HIGH | 7.5 | 1.2% | Jul 15, 2020 | An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products'... |
| CVE-2020-15602 | HIGH | 7.8 | 1.0% | Jul 15, 2020 | An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and bel... |
| CVE-2020-15366 | MEDIUM | 5.6 | 2.3% | Jul 15, 2020 | An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON sc... |
| CVE-2020-14066 | HIGH | 8.8 | 1.8% | Jul 15, 2020 | IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to acces... |
| CVE-2020-14065 | MEDIUM | 6.5 | 1.5% | Jul 15, 2020 | IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space. |
| CVE-2020-14064 | MEDIUM | 6.5 | 1.0% | Jul 15, 2020 | IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts. |
| CVE-2020-12854 | HIGH | 8.8 | 3.0% | Jul 15, 2020 | A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can ... |
| CVE-2020-12684 | CRITICAL | 9.8 | 1.1% | Jul 15, 2020 | XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, w... |
| CVE-2020-11439 | HIGH | 8.8 | 2.0% | Jul 15, 2020 | LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed wi... |
| CVE-2020-11438 | HIGH | 8.8 | 0.6% | Jul 15, 2020 | LibreHealth EMR v2.0.0 is affected by systemic CSRF. |
| CVE-2020-11437 | MEDIUM | 4.3 | 0.9% | Jul 15, 2020 | LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database... |
| CVE-2020-11436 | CRITICAL | 9 | 1.3% | Jul 15, 2020 | LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other us... |
| CVE-2020-10284 | CRITICAL | 9.1 | 1.4% | Jul 15, 2020 | No authentication is required to control the robot inside the network, moreso the latest available user manual shows an ... |
| CVE-2020-15717 | MEDIUM | 6.1 | 1.5% | Jul 15, 2020 | RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script... |
| CVE-2020-15716 | MEDIUM | 6.1 | 5.6% | Jul 15, 2020 | RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php scrip... |
| CVE-2020-2984 | HIGH | 7.1 | 1.1% | Jul 15, 2020 | Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager (component: Discovery and collect... |
| CVE-2020-2983 | HIGH | 7.1 | 1.1% | Jul 15, 2020 | Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager (component: Data Masking). ... |
| CVE-2020-2982 | HIGH | 7.1 | 1.1% | Jul 15, 2020 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now