2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-29026 | MEDIUM | 6.5 | 1.5% | Feb 15, 2021 | A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated a... |
| CVE-2020-4956 | MEDIUM | 4.8 | 0.4% | Feb 15, 2021 | IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows cer... |
| CVE-2020-4954 | MEDIUM | 5.4 | 0.5% | Feb 15, 2021 | IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, ... |
| CVE-2020-28500 | MEDIUM | 5.3 | 7.3% | Feb 15, 2021 | Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim a... |
| CVE-2020-7071 | MEDIUM | 5.3 | 3.0% | Feb 15, 2021 | In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($ur... |
| CVE-2020-29451 | MEDIUM | 4.3 | 0.8% | Feb 15, 2021 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Info... |
| CVE-2020-36237 | MEDIUM | 5.3 | 1.2% | Feb 15, 2021 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field o... |
| CVE-2020-36236 | MEDIUM | 6.1 | 1.3% | Feb 15, 2021 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript... |
| CVE-2020-36235 | MEDIUM | 5.3 | 2.0% | Feb 15, 2021 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field a... |
| CVE-2020-36234 | MEDIUM | 4.8 | 1.0% | Feb 15, 2021 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript... |
| CVE-2020-27867 | MEDIUM | 6.8 | 2.3% | Feb 12, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R602... |
| CVE-2020-27863 | MEDIUM | 6.5 | 1.0% | Feb 12, 2021 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Li... |
| CVE-2020-9307 | MEDIUM | 6.5 | 0.6% | Feb 11, 2021 | Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attack... |
| CVE-2020-13186 | MEDIUM | 6.5 | 0.3% | Feb 11, 2021 | An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web f... |
| CVE-2020-13185 | MEDIUM | 6.5 | 1.0% | Feb 11, 2021 | Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were acce... |
| CVE-2020-4768 | MEDIUM | 5.4 | 0.5% | Feb 11, 2021 | IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scri... |
| CVE-2020-8030 | MEDIUM | 4.4 | 0.2% | Feb 11, 2021 | A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapT... |
| CVE-2020-8029 | MEDIUM | 4 | 0.3% | Feb 11, 2021 | A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local at... |
| CVE-2020-8027 | MEDIUM | 6.6 | 0.3% | Feb 11, 2021 | A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Serv... |
| CVE-2020-8031 | MEDIUM | 5.4 | 0.7% | Feb 11, 2021 | A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Servi... |
| CVE-2020-27870 | MEDIUM | 6.5 | 4.3% | Feb 10, 2021 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Ori... |
| CVE-2020-24842 | MEDIUM | 6.1 | 0.7% | Feb 10, 2021 | PNPSCADA 2.200816204020 allows cross-site scripting (XSS), which can execute arbitrary JavaScript in the victim's browse... |
| CVE-2020-8355 | MEDIUM | 4.9 | 0.5% | Feb 10, 2021 | An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows... |
| CVE-2020-16120 | MEDIUM | 4.4 | 0.4% | Feb 10, 2021 | Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from... |
| CVE-2020-13565 | MEDIUM | 6.1 | 1.9% | Feb 10, 2021 | An open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3.7, OpenEMR 5.0.2 and O... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now