2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9489 | MEDIUM | 5.5 | 2.5% | Apr 27, 2020 | A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can a... |
| CVE-2020-12272 | MEDIUM | 5.3 | 2.1% | Apr 27, 2020 | OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about t... |
| CVE-2020-11420 | MEDIUM | 6.5 | 1.6% | Apr 27, 2020 | UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exp... |
| CVE-2020-12274 | CRITICAL | 9.8 | 1.2% | Apr 27, 2020 | In TestLink 1.9.20, the lib/cfields/cfieldsExport.php goback_url parameter causes a security risk because it depends on ... |
| CVE-2020-12273 | HIGH | 7.5 | 0.8% | Apr 27, 2020 | In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials. |
| CVE-2020-12052 | MEDIUM | 6.1 | 1.3% | Apr 27, 2020 | Grafana version < 6.7.3 is vulnerable for annotation popup XSS. |
| CVE-2020-10997 | MEDIUM | 6.5 | 1.0% | Apr 27, 2020 | Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may i... |
| CVE-2020-10996 | HIGH | 8.1 | 1.5% | Apr 27, 2020 | An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static tr... |
| CVE-2020-10664 | HIGH | 7.5 | 1.3% | Apr 27, 2020 | The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference. |
| CVE-2020-10647 | — | — | — | Apr 27, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-12271 | CRITICAL | 9.8 | 43.1% | Apr 27, 2020 | A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as e... |
| CVE-2020-12270 | MEDIUM | 6.5 | 1.4% | Apr 27, 2020 | React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote... |
| CVE-2020-12268 | CRITICAL | 9.8 | 2.6% | Apr 27, 2020 | jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow. |
| CVE-2020-12267 | CRITICAL | 9.8 | 2.3% | Apr 27, 2020 | setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock. |
| CVE-2020-12265 | CRITICAL | 9.8 | 2.2% | Apr 26, 2020 | The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when... |
| CVE-2020-12254 | HIGH | 7.8 | 0.4% | Apr 26, 2020 | Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlin... |
| CVE-2020-6213 | MEDIUM | 6.1 | 0.8% | Apr 24, 2020 | SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750,... |
| CVE-2020-6212 | MEDIUM | 5.4 | 0.7% | Apr 24, 2020 | Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (version... |
| CVE-2020-12070 | HIGH | 7.5 | 2.0% | Apr 24, 2020 | The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulner... |
| CVE-2020-12245 | MEDIUM | 6.1 | 1.9% | Apr 24, 2020 | Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip. |
| CVE-2020-11004 | HIGH | 7.5 | 1.5% | Apr 24, 2020 | SQL Injection was discovered in Admidio before version 3.3.13. The main cookie parameter is concatenated into a SQL quer... |
| CVE-2020-11013 | MEDIUM | 5 | 1.3% | Apr 24, 2020 | Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0. `lookup` is a Helm... |
| CVE-2020-7134 | MEDIUM | 6.5 | 0.9% | Apr 24, 2020 | A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2... |
| CVE-2020-7133 | CRITICAL | 9.8 | 1.7% | Apr 24, 2020 | A unauthorized remote access vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. |
| CVE-2020-1741 | MEDIUM | 5.9 | 0.9% | Apr 24, 2020 | A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now