2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13756 | CRITICAL | 9.8 | 55.1% | Jun 3, 2020 | Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the... |
| CVE-2020-13596 | MEDIUM | 6.1 | 2.9% | Jun 3, 2020 | An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin... |
| CVE-2020-13254 | MEDIUM | 5.9 | 6.0% | Jun 3, 2020 | An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not pe... |
| CVE-2020-10749 | MEDIUM | 6 | 2.4% | Jun 3, 2020 | A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious con... |
| CVE-2020-10516 | CRITICAL | 9.8 | 1.6% | Jun 3, 2020 | An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization... |
| CVE-2020-7117 | HIGH | 7.2 | 3.3% | Jun 3, 2020 | The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the atta... |
| CVE-2020-7116 | HIGH | 7.2 | 3.3% | Jun 3, 2020 | The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the atta... |
| CVE-2020-7115 | CRITICAL | 9.8 | 64.6% | Jun 3, 2020 | The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon succ... |
| CVE-2020-2200 | HIGH | 8.8 | 2.4% | Jun 3, 2020 | Jenkins Play Framework Plugin 1.0.2 and earlier lets users specify the path to the `play` command on the Jenkins master ... |
| CVE-2020-2199 | MEDIUM | 6.1 | 6.2% | Jun 3, 2020 | Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error message for the repository... |
| CVE-2020-2198 | MEDIUM | 6.5 | 0.8% | Jun 3, 2020 | Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API UR... |
| CVE-2020-2197 | MEDIUM | 4.3 | 0.6% | Jun 3, 2020 | Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to ac... |
| CVE-2020-2196 | HIGH | 8 | 0.9% | Jun 3, 2020 | Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perfor... |
| CVE-2020-2195 | MEDIUM | 5.4 | 0.7% | Jun 3, 2020 | Jenkins Compact Columns Plugin 1.11 and earlier displays the unprocessed job description in tooltips, resulting in a sto... |
| CVE-2020-2194 | MEDIUM | 5.4 | 0.7% | Jun 3, 2020 | Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the display name of the builds in the trend chart, result... |
| CVE-2020-2193 | MEDIUM | 5.4 | 0.7% | Jun 3, 2020 | Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the parser identifier when rendering charts, resulting in... |
| CVE-2020-2192 | MEDIUM | 6.5 | 0.6% | Jun 3, 2020 | A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allo... |
| CVE-2020-2191 | MEDIUM | 4.3 | 0.7% | Jun 3, 2020 | Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier does not check permissions on API endpoints that a... |
| CVE-2020-2190 | MEDIUM | 5.4 | 0.8% | Jun 3, 2020 | Jenkins Script Security Plugin 1.72 and earlier does not correctly escape pending or approved classpath entries on the I... |
| CVE-2020-1963 | CRITICAL | 9.1 | 5.0% | Jun 3, 2020 | Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used ... |
| CVE-2020-13776 | MEDIUM | 6.7 | 0.5% | Jun 3, 2020 | systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits... |
| CVE-2020-4026 | MEDIUM | 4.3 | 0.8% | Jun 3, 2020 | The CustomAppsRestResource list resource in Atlassian Navigator Links before version 3.3.23, from version 4.0.0 before v... |
| CVE-2020-13775 | MEDIUM | 6.5 | 1.8% | Jun 2, 2020 | ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) i... |
| CVE-2020-13764 | HIGH | 7.5 | 1.8% | Jun 2, 2020 | common.php in the Gravity Forms plugin before 2.4.9 for WordPress can leak hashed passwords because user_pass is not con... |
| CVE-2020-12607 | HIGH | 7.5 | 1.3% | Jun 2, 2020 | An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the poin... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now