2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4047 | MEDIUM | 6.8 | 3.6% | Jun 12, 2020 | In affected versions of WordPress, authenticated users with upload permissions (like authors) are able to inject JavaScr... |
| CVE-2020-4046 | MEDIUM | 5.4 | 2.4% | Jun 12, 2020 | In affected versions of WordPress, users with low privileges (like contributors and authors) can use the embed block in ... |
| CVE-2020-14004 | HIGH | 7.8 | 0.7% | Jun 12, 2020 | An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd servi... |
| CVE-2020-9651 | MEDIUM | 6.1 | 2.4% | Jun 12, 2020 | Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected) vulnerability. Successful expl... |
| CVE-2020-9648 | MEDIUM | 6.1 | 2.4% | Jun 12, 2020 | Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability. Successful exploitation cou... |
| CVE-2020-9647 | MEDIUM | 6.1 | 2.4% | Jun 12, 2020 | Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based) vulnerability. Successful expl... |
| CVE-2020-9645 | HIGH | 7.5 | 3.3% | Jun 12, 2020 | Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability. Success... |
| CVE-2020-9644 | MEDIUM | 5.4 | 1.8% | Jun 12, 2020 | Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored) vulnerability. Successful exploit... |
| CVE-2020-9643 | HIGH | 7.5 | 3.3% | Jun 12, 2020 | Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful ex... |
| CVE-2020-9636 | HIGH | 8.8 | 3.9% | Jun 12, 2020 | Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful exploitation could lead ... |
| CVE-2020-9635 | HIGH | 8.8 | 4.5% | Jun 12, 2020 | Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could le... |
| CVE-2020-9634 | HIGH | 8.8 | 4.5% | Jun 12, 2020 | Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could le... |
| CVE-2020-9633 | CRITICAL | 9.8 | 7.6% | Jun 12, 2020 | Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, ... |
| CVE-2020-10732 | MEDIUM | 4.4 | 0.6% | Jun 12, 2020 | A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local... |
| CVE-2020-4251 | MEDIUM | 5.4 | 0.6% | Jun 12, 2020 | IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting. This vulnerability allows users to embed ... |
| CVE-2020-3930 | LOW | 3.3 | 0.3% | Jun 12, 2020 | GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read the... |
| CVE-2020-3929 | MEDIUM | 5.9 | 0.5% | Jun 12, 2020 | GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may c... |
| CVE-2020-3928 | CRITICAL | 9.8 | 0.9% | Jun 12, 2020 | GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in a... |
| CVE-2020-14048 | HIGH | 7.5 | 4.8% | Jun 12, 2020 | Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the install... |
| CVE-2020-4045 | HIGH | 7.5 | 1.3% | Jun 11, 2020 | SSB-DB version 20.0.0 has an information disclosure vulnerability. The get() method is supposed to only decrypt messages... |
| CVE-2020-13250 | HIGH | 7.5 | 2.9% | Jun 11, 2020 | HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching f... |
| CVE-2020-13170 | HIGH | 7.5 | 1.7% | Jun 11, 2020 | HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data cen... |
| CVE-2020-12797 | MEDIUM | 5.3 | 1.6% | Jun 11, 2020 | HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to sec... |
| CVE-2020-12758 | HIGH | 7.5 | 1.7% | Jun 11, 2020 | HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Intro... |
| CVE-2020-12023 | MEDIUM | 4.5 | 0.5% | Jun 11, 2020 | Philips IntelliBridge Enterprise (IBE), Versions B.12 and prior, IntelliBridge Enterprise system integration with SureSi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now