2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11549 | HIGH | 8.8 | 4.1% | May 18, 2020 | An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satel... |
| CVE-2020-8035 | MEDIUM | 6.1 | 0.9% | May 18, 2020 | The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripti... |
| CVE-2020-12801 | MEDIUM | 5.3 | 1.3% | May 18, 2020 | If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffic... |
| CVE-2020-12256 | MEDIUM | 5.4 | 92.8% | May 18, 2020 | rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can ... |
| CVE-2020-12255 | HIGH | 8.8 | 52.6% | May 18, 2020 | rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor... |
| CVE-2020-10967 | MEDIUM | 5.3 | 8.2% | May 18, 2020 | In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail wi... |
| CVE-2020-9524 | MEDIUM | 5.4 | 0.5% | May 18, 2020 | Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions pri... |
| CVE-2020-12258 | CRITICAL | 9.1 | 1.7% | May 18, 2020 | rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled. The application... |
| CVE-2020-12257 | HIGH | 8.8 | 1.4% | May 18, 2020 | rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because it lacks implementation of CSRF protection such... |
| CVE-2020-10958 | MEDIUM | 5.3 | 6.1% | May 18, 2020 | In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-log... |
| CVE-2020-10957 | HIGH | 7.5 | 7.2% | May 18, 2020 | In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dere... |
| CVE-2020-12259 | MEDIUM | 5.4 | 94.8% | May 18, 2020 | rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can... |
| CVE-2020-13129 | HIGH | 7.2 | 1.7% | May 18, 2020 | An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platforms... |
| CVE-2020-12860 | MEDIUM | 5.3 | 1.0% | May 18, 2020 | COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can h... |
| CVE-2020-12859 | MEDIUM | 5.3 | 0.7% | May 18, 2020 | Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify ... |
| CVE-2020-12858 | HIGH | 7.5 | 1.8% | May 18, 2020 | Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker... |
| CVE-2020-12857 | HIGH | 7.5 | 1.6% | May 18, 2020 | Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re... |
| CVE-2020-12856 | CRITICAL | 9.8 | 5.1% | May 18, 2020 | OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Andro... |
| CVE-2020-13128 | HIGH | 7.5 | 1.6% | May 18, 2020 | An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) acce... |
| CVE-2020-4345 | LOW | 3.3 | 0.3% | May 17, 2020 | IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local use... |
| CVE-2020-13126 | CRITICAL | 9.9 | 8.6% | May 17, 2020 | An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in ... |
| CVE-2020-13125 | MEDIUM | 6.5 | 2.3% | May 17, 2020 | An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the w... |
| CVE-2020-13121 | MEDIUM | 6.1 | 3.5% | May 16, 2020 | Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt. |
| CVE-2020-13118 | CRITICAL | 9.8 | 4.0% | May 16, 2020 | An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection exists in check_community... |
| CVE-2020-13111 | HIGH | 7.5 | 1.4% | May 16, 2020 | NaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c ChunkedDecode function not properly valida... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now