2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7021 | MEDIUM | 4.9 | 1.3% | Feb 10, 2021 | Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_req... |
| CVE-2020-29171 | MEDIUM | 6.1 | 1.5% | Feb 10, 2021 | Cross-site scripting (XSS) vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP... |
| CVE-2020-26196 | MEDIUM | 5.5 | 0.3% | Feb 9, 2021 | Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the ... |
| CVE-2020-26195 | MEDIUM | 5.3 | 1.8% | Feb 9, 2021 | Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneou... |
| CVE-2020-22839 | MEDIUM | 6.1 | 4.5% | Feb 9, 2021 | Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allow... |
| CVE-2020-28644 | MEDIUM | 4.3 | 0.5% | Feb 9, 2021 | The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against so... |
| CVE-2020-35943 | MEDIUM | 6.5 | 0.7% | Feb 9, 2021 | A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload. (... |
| CVE-2020-35572 | MEDIUM | 6.1 | 2.0% | Feb 9, 2021 | Adminer through 4.7.8 allows XSS via the history parameter to the default URI. |
| CVE-2020-28394 | MEDIUM | 5.5 | 0.7% | Feb 9, 2021 | A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.... |
| CVE-2020-28388 | MEDIUM | 5.3 | 1.6% | Feb 9, 2021 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ether... |
| CVE-2020-16144 | MEDIUM | 5.7 | 0.8% | Feb 9, 2021 | When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous us... |
| CVE-2020-27008 | MEDIUM | 5.5 | 0.7% | Feb 9, 2021 | A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.... |
| CVE-2020-27007 | MEDIUM | 5.5 | 2.5% | Feb 9, 2021 | A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.... |
| CVE-2020-27004 | MEDIUM | 5.5 | 2.0% | Feb 9, 2021 | A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.... |
| CVE-2020-26998 | MEDIUM | 5.5 | 0.6% | Feb 9, 2021 | A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.... |
| CVE-2020-10048 | MEDIUM | 5.5 | 0.3% | Feb 9, 2021 | A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions < V7.5 SP2). Due to an ... |
| CVE-2020-4996 | MEDIUM | 5.5 | 0.4% | Feb 9, 2021 | IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the... |
| CVE-2020-4995 | MEDIUM | 5.3 | 1.1% | Feb 9, 2021 | IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a use... |
| CVE-2020-4791 | MEDIUM | 5.3 | 0.3% | Feb 9, 2021 | IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using ma... |
| CVE-2020-4790 | MEDIUM | 6.5 | 0.6% | Feb 9, 2021 | IBM Security Identity Governance and Intelligence 5.2.6 could allow a user to cause a denial of service due to improperl... |
| CVE-2020-22841 | MEDIUM | 4.8 | 3.5% | Feb 9, 2021 | Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution... |
| CVE-2020-22840 | MEDIUM | 6.1 | 13.9% | Feb 9, 2021 | Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redi... |
| CVE-2020-13462 | MEDIUM | 5.7 | 0.4% | Feb 9, 2021 | Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in... |
| CVE-2020-13461 | MEDIUM | 4.3 | 0.5% | Feb 9, 2021 | Username enumeration in present in Tufin SecureTrack. It's affecting all versions of SecureTrack. The vendor has decided... |
| CVE-2020-13409 | MEDIUM | 5.9 | 0.4% | Feb 9, 2021 | Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is als... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now