2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4384 | MEDIUM | 5.4 | 0.6% | May 6, 2020 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows ... |
| CVE-2020-10704 | HIGH | 7.5 | 3.5% | May 6, 2020 | A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain request... |
| CVE-2020-10693 | MEDIUM | 5.3 | 2.3% | May 6, 2020 | A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invali... |
| CVE-2020-7806 | CRITICAL | 9.8 | 0.7% | May 6, 2020 | Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method supporte... |
| CVE-2020-6094 | HIGH | 8.8 | 3.6% | May 6, 2020 | An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Acc... |
| CVE-2020-6082 | HIGH | 8.8 | 3.6% | May 6, 2020 | An exploitable out-of-bounds write vulnerability exists in the ico_read function of the igcore19d.dll library of Accusof... |
| CVE-2020-6076 | HIGH | 8.8 | 3.6% | May 6, 2020 | An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser of the Accusoft ImageGea... |
| CVE-2020-6075 | HIGH | 8.8 | 3.6% | May 6, 2020 | An exploitable out-of-bounds write vulnerability exists in the store_data_buffer function of the igcore19d.dll library o... |
| CVE-2020-4092 | MEDIUM | 5.3 | 0.3% | May 6, 2020 | "If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clea... |
| CVE-2020-2189 | HIGH | 8.8 | 2.3% | May 6, 2020 | Jenkins SCM Filter Jervis Plugin 0.2.1 and earlier does not configure its YAML parser to prevent the instantiation of ar... |
| CVE-2020-2188 | MEDIUM | 4.3 | 0.6% | May 6, 2020 | A missing permission check in Jenkins Amazon EC2 Plugin 1.50.1 and earlier in form-related methods allowed users with Ov... |
| CVE-2020-2187 | MEDIUM | 5.6 | 0.4% | May 6, 2020 | Jenkins Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed certificates and does not perform hostn... |
| CVE-2020-2186 | MEDIUM | 4.3 | 0.6% | May 6, 2020 | A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision... |
| CVE-2020-2185 | MEDIUM | 5.6 | 0.7% | May 6, 2020 | Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the... |
| CVE-2020-2184 | MEDIUM | 4.3 | 44.5% | May 6, 2020 | A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and manipul... |
| CVE-2020-2183 | MEDIUM | 6.5 | 0.9% | May 6, 2020 | Jenkins Copy Artifact Plugin 1.43.1 and earlier performs improper permission checks, allowing attackers to copy artifact... |
| CVE-2020-2182 | MEDIUM | 4.3 | 0.9% | May 6, 2020 | Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$... |
| CVE-2020-2181 | MEDIUM | 6.5 | 1.1% | May 6, 2020 | Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build lo... |
| CVE-2020-12672 | HIGH | 7.5 | 2.9% | May 6, 2020 | GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c. |
| CVE-2020-12666 | MEDIUM | 6.1 | 1.4% | May 5, 2020 | macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.c... |
| CVE-2020-12463 | HIGH | 7.8 | 0.4% | May 5, 2020 | An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling f... |
| CVE-2020-12439 | MEDIUM | 5.3 | 1.6% | May 5, 2020 | Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain. |
| CVE-2020-11036 | MEDIUM | 5.4 | 0.8% | May 5, 2020 | In GLPI before version 9.4.6 there are multiple related stored XSS vulnerabilities. The package is vulnerable to Stored ... |
| CVE-2020-11035 | CRITICAL | 9.3 | 0.8% | May 5, 2020 | In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The im... |
| CVE-2020-11034 | MEDIUM | 6.1 | 7.6% | May 5, 2020 | In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now