2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11994 | HIGH | 7.5 | 4.5% | Jul 8, 2020 | Server-Side Template Injection and arbitrary file disclosure on Camel templating components |
| CVE-2020-14476 | — | — | — | Jul 8, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-7140 | MEDIUM | 6.1 | 0.8% | Jul 8, 2020 | A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a ... |
| CVE-2020-5764 | HIGH | 8.8 | 2.0% | Jul 8, 2020 | MX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal vulnerability when user is usin... |
| CVE-2020-3973 | HIGH | 8.8 | 1.1% | Jul 8, 2020 | The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious act... |
| CVE-2020-11849 | CRITICAL | 9.8 | 1.2% | Jul 8, 2020 | Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prio... |
| CVE-2020-3931 | CRITICAL | 9.8 | 1.8% | Jul 8, 2020 | Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute ar... |
| CVE-2020-15600 | MEDIUM | 6.5 | 1.9% | Jul 7, 2020 | An issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password. |
| CVE-2020-8916 | MEDIUM | 5.5 | 0.3% | Jul 7, 2020 | A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an e... |
| CVE-2020-15599 | MEDIUM | 6.1 | 2.1% | Jul 7, 2020 | Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field. |
| CVE-2020-8521 | CRITICAL | 9.8 | 1.4% | Jul 7, 2020 | SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with a... |
| CVE-2020-8520 | CRITICAL | 9.8 | 1.4% | Jul 7, 2020 | SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with aja... |
| CVE-2020-8519 | CRITICAL | 9.8 | 1.4% | Jul 7, 2020 | SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php... |
| CVE-2020-15008 | HIGH | 7.5 | 0.9% | Jul 7, 2020 | A SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or 2019.12. A SQL Injection in the pr... |
| CVE-2020-12821 | CRITICAL | 9.8 | 1.9% | Jul 7, 2020 | Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack. |
| CVE-2020-12736 | HIGH | 7.2 | 2.0% | Jul 7, 2020 | Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an... |
| CVE-2020-15095 | MEDIUM | 4.4 | 0.4% | Jul 7, 2020 | Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The C... |
| CVE-2020-15350 | CRITICAL | 9.8 | 1.5% | Jul 7, 2020 | RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode() uses an output buffer es... |
| CVE-2020-15515 | HIGH | 8.8 | 1.9% | Jul 7, 2020 | The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution. |
| CVE-2020-15035 | MEDIUM | 5.4 | 0.5% | Jul 7, 2020 | NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja... |
| CVE-2020-15034 | MEDIUM | 5.4 | 0.6% | Jul 7, 2020 | NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja... |
| CVE-2020-15033 | MEDIUM | 5.4 | 0.6% | Jul 7, 2020 | NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja... |
| CVE-2020-15032 | MEDIUM | 5.4 | 0.6% | Jul 7, 2020 | NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja... |
| CVE-2020-15031 | MEDIUM | 5.4 | 0.6% | Jul 7, 2020 | NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja... |
| CVE-2020-15030 | MEDIUM | 5.4 | 0.6% | Jul 7, 2020 | NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now