2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10641 | HIGH | 7.5 | 1.3% | Apr 28, 2020 | An unprotected logging route may allow an attacker to write endless log statements into the database without space limit... |
| CVE-2020-1745 | CRITICAL | 9.8 | 4.8% | Apr 28, 2020 | A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in U... |
| CVE-2020-4329 | MEDIUM | 4.3 | 1.3% | Apr 28, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenti... |
| CVE-2020-1774 | MEDIUM | 4.9 | 0.9% | Apr 28, 2020 | When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore ... |
| CVE-2020-12078 | HIGH | 8.8 | 10.0% | Apr 28, 2020 | An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/conf... |
| CVE-2020-10944 | MEDIUM | 5.4 | 0.7% | Apr 28, 2020 | HashiCorp Nomad and Nomad Enterprise up to 0.10.4 contained a cross-site scripting vulnerability such that files from a ... |
| CVE-2020-10094 | MEDIUM | 5.4 | 0.7% | Apr 28, 2020 | A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x befo... |
| CVE-2020-10093 | MEDIUM | 5.4 | 0.7% | Apr 28, 2020 | A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products. |
| CVE-2020-12286 | MEDIUM | 4.3 | 1.0% | Apr 28, 2020 | In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped to any dimension. Fo... |
| CVE-2020-5570 | MEDIUM | 5.4 | 0.8% | Apr 28, 2020 | Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated atta... |
| CVE-2020-12284 | CRITICAL | 9.8 | 3.8% | Apr 28, 2020 | cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MA... |
| CVE-2020-5568 | MEDIUM | 6.1 | 0.8% | Apr 28, 2020 | Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web scrip... |
| CVE-2020-5567 | HIGH | 7.5 | 1.4% | Apr 28, 2020 | Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Applica... |
| CVE-2020-5566 | MEDIUM | 4.3 | 1.1% | Apr 28, 2020 | Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the... |
| CVE-2020-5565 | MEDIUM | 4.3 | 0.8% | Apr 28, 2020 | Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter... |
| CVE-2020-5564 | MEDIUM | 6.1 | 0.8% | Apr 28, 2020 | Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web scri... |
| CVE-2020-5563 | MEDIUM | 5.3 | 1.2% | Apr 28, 2020 | Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the aff... |
| CVE-2020-5562 | MEDIUM | 4.9 | 0.9% | Apr 28, 2020 | Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an admini... |
| CVE-2020-9481 | HIGH | 7.5 | 2.4% | Apr 27, 2020 | Apache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read attack. |
| CVE-2020-7640 | CRITICAL | 9.8 | 2.1% | Apr 27, 2020 | pixl-class prior to 1.0.3 allows execution of arbitrary commands. The members argument of the create function can be con... |
| CVE-2020-7609 | CRITICAL | 9.8 | 1.6% | Apr 27, 2020 | node-rules including 3.0.0 and prior to 5.0.0 allows injection of arbitrary commands. The argument rules of function "fr... |
| CVE-2020-7067 | HIGH | 7.5 | 4.3% | Apr 27, 2020 | In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (un... |
| CVE-2020-1762 | HIGH | 8.6 | 1.1% | Apr 27, 2020 | An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version ... |
| CVE-2020-1722 | MEDIUM | 5.3 | 1.0% | Apr 27, 2020 | A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to... |
| CVE-2020-11869 | LOW | 3.3 | 0.4% | Apr 27, 2020 | An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now