2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5894 | HIGH | 8.1 | 1.0% | May 7, 2020 | On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users lo... |
| CVE-2020-12696 | MEDIUM | 6.1 | 2.0% | May 7, 2020 | The iframe plugin before 4.5 for WordPress does not sanitize a URL. |
| CVE-2020-12692 | MEDIUM | 5.4 | 0.7% | May 7, 2020 | An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check ... |
| CVE-2020-12691 | HIGH | 8.8 | 4.9% | May 7, 2020 | An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any authenticated user can create an EC2 creden... |
| CVE-2020-12690 | HIGH | 8.8 | 1.9% | May 7, 2020 | An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The list of roles provided for an OAuth1 access... |
| CVE-2020-12689 | HIGH | 8.8 | 1.6% | May 7, 2020 | An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any user authenticated within a limited scope (... |
| CVE-2020-12678 | — | — | — | May 6, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-12677. Reason: This candidate is a reservation d... |
| CVE-2020-12669 | HIGH | 8.8 | 2.0% | May 6, 2020 | core/get_menudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restricti... |
| CVE-2020-11727 | MEDIUM | 6.1 | 2.0% | May 6, 2020 | A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordP... |
| CVE-2020-8899 | CRITICAL | 9.8 | 5.7% | May 6, 2020 | There is a buffer overwrite vulnerability in the Quram qmg library of Samsung's Android OS versions O(8.x), P(9.0) and Q... |
| CVE-2020-3334 | HIGH | 7.4 | 0.4% | May 6, 2020 | A vulnerability in the ARP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Thr... |
| CVE-2020-3329 | MEDIUM | 4.3 | 0.7% | May 6, 2020 | A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Direc... |
| CVE-2020-3318 | CRITICAL | 9.8 | 1.0% | May 6, 2020 | Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software cou... |
| CVE-2020-3315 | MEDIUM | 5.3 | 2.2% | May 6, 2020 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticate... |
| CVE-2020-3313 | MEDIUM | 6.1 | 0.8% | May 6, 2020 | A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote... |
| CVE-2020-3312 | HIGH | 7.5 | 1.1% | May 6, 2020 | A vulnerability in the application policy configuration of Cisco Firepower Threat Defense (FTD) Software could allow an ... |
| CVE-2020-3311 | MEDIUM | 6.1 | 0.8% | May 6, 2020 | A vulnerability in the web interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated,... |
| CVE-2020-3310 | MEDIUM | 4.9 | 1.2% | May 6, 2020 | A vulnerability in the XML parser code of Cisco Firepower Device Manager On-Box software could allow an authenticated, r... |
| CVE-2020-3309 | HIGH | 7.2 | 1.8% | May 6, 2020 | A vulnerability in Cisco Firepower Device Manager (FDM) On-Box software could allow an authenticated, remote attacker to... |
| CVE-2020-3308 | MEDIUM | 4.9 | 0.6% | May 6, 2020 | A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow... |
| CVE-2020-3307 | MEDIUM | 5.3 | 1.0% | May 6, 2020 | A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote... |
| CVE-2020-3306 | HIGH | 7.5 | 1.2% | May 6, 2020 | A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defens... |
| CVE-2020-3305 | HIGH | 7.5 | 1.2% | May 6, 2020 | A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (... |
| CVE-2020-3303 | HIGH | 7.5 | 1.2% | May 6, 2020 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Softwa... |
| CVE-2020-3302 | HIGH | 8.1 | 1.7% | May 6, 2020 | A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote a... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now