2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14930 | HIGH | 8.1 | 3.4% | Jun 19, 2020 | An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-res... |
| CVE-2020-10750 | MEDIUM | 5.5 | 0.4% | Jun 19, 2020 | Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when t... |
| CVE-2020-9495 | MEDIUM | 5.3 | 8.0% | Jun 19, 2020 | Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute... |
| CVE-2020-14929 | HIGH | 7.5 | 1.8% | Jun 19, 2020 | Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involvi... |
| CVE-2020-8167 | MEDIUM | 6.5 | 1.5% | Jun 19, 2020 | A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong d... |
| CVE-2020-8165 | CRITICAL | 9.8 | 45.7% | Jun 19, 2020 | A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attack... |
| CVE-2020-3972 | LOW | 3.3 | 0.4% | Jun 19, 2020 | VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest Fil... |
| CVE-2020-13277 | MEDIUM | 6.5 | 1.8% | Jun 19, 2020 | An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later... |
| CVE-2020-8184 | HIGH | 7.5 | 2.9% | Jun 19, 2020 | A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 tha... |
| CVE-2020-8164 | HIGH | 7.5 | 4.2% | Jun 19, 2020 | A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker... |
| CVE-2020-8162 | HIGH | 7.5 | 3.1% | Jun 19, 2020 | A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStor... |
| CVE-2020-14927 | MEDIUM | 4.8 | 0.5% | Jun 19, 2020 | Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases > Add" screen. |
| CVE-2020-14926 | MEDIUM | 5.4 | 0.6% | Jun 19, 2020 | CMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact=ModuleManager page. |
| CVE-2020-14475 | MEDIUM | 6.1 | 0.8% | Jun 19, 2020 | A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web ... |
| CVE-2020-13961 | MEDIUM | 6.5 | 1.7% | Jun 19, 2020 | Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are st... |
| CVE-2020-4297 | MEDIUM | 5.4 | 0.6% | Jun 19, 2020 | IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerabi... |
| CVE-2020-4295 | MEDIUM | 5.4 | 0.6% | Jun 19, 2020 | IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerabi... |
| CVE-2020-4281 | MEDIUM | 5.4 | 0.6% | Jun 19, 2020 | IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerabi... |
| CVE-2020-14470 | MEDIUM | 6.5 | 0.9% | Jun 19, 2020 | In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that l... |
| CVE-2020-14460 | MEDIUM | 6.5 | 0.8% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.19.0, 5.18.1, 5.17.3, 5.16.5, and 5.9.8. Creation of a trusted OAu... |
| CVE-2020-14459 | HIGH | 7.5 | 0.9% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.19.0. Attackers can rename a channel and cause a collision with a ... |
| CVE-2020-14458 | HIGH | 7.5 | 1.1% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.19.0. Attackers can discover private channels via the "get channel... |
| CVE-2020-14457 | MEDIUM | 5.3 | 0.9% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the upd... |
| CVE-2020-14456 | HIGH | 7.3 | 0.4% | Jun 19, 2020 | An issue was discovered in Mattermost Desktop App before 4.4.0. The Same Origin Policy is mishandled during access-contr... |
| CVE-2020-14455 | MEDIUM | 6.5 | 1.2% | Jun 19, 2020 | An issue was discovered in Mattermost Desktop App before 4.4.0. Prompting for HTTP Basic Authentication is mishandled, a... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now