2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11012 | HIGH | 7.5 | 2.1% | Apr 23, 2020 | MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin API. Given an ... |
| CVE-2020-5867 | HIGH | 8.1 | 0.4% | Apr 23, 2020 | In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check... |
| CVE-2020-8798 | MEDIUM | 5.5 | 0.4% | Apr 23, 2020 | httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the... |
| CVE-2020-5866 | MEDIUM | 5.5 | 0.3% | Apr 23, 2020 | In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to ch... |
| CVE-2020-5865 | MEDIUM | 4.8 | 0.4% | Apr 23, 2020 | In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over une... |
| CVE-2020-5864 | HIGH | 7.4 | 1.0% | Apr 23, 2020 | In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS... |
| CVE-2020-8797 | MEDIUM | 6.7 | 0.9% | Apr 23, 2020 | Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call ... |
| CVE-2020-7132 | MEDIUM | 5.4 | 0.7% | Apr 23, 2020 | A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely... |
| CVE-2020-12113 | MEDIUM | 6.1 | 0.9% | Apr 23, 2020 | BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used. |
| CVE-2020-12112 | HIGH | 7.5 | 5.3% | Apr 23, 2020 | BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion. |
| CVE-2020-12105 | MEDIUM | 5.9 | 1.7% | Apr 23, 2020 | OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers... |
| CVE-2020-7643 | MEDIUM | 5.3 | 1.0% | Apr 23, 2020 | paypal-adaptive through 0.4.2 manipulation of JavaScript objects resulting in Prototype Pollution. The PayPal function c... |
| CVE-2020-4415 | CRITICAL | 9.8 | 8.1% | Apr 23, 2020 | IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checki... |
| CVE-2020-4353 | MEDIUM | 4.6 | 0.3% | Apr 23, 2020 | IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the user... |
| CVE-2020-4311 | HIGH | 7 | 0.3% | Apr 23, 2020 | IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially... |
| CVE-2020-4202 | HIGH | 8.8 | 1.0% | Apr 23, 2020 | IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the serv... |
| CVE-2020-1760 | MEDIUM | 6.1 | 1.5% | Apr 23, 2020 | A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw... |
| CVE-2020-12054 | MEDIUM | 6.1 | 3.6% | Apr 23, 2020 | The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also a... |
| CVE-2020-11945 | CRITICAL | 9.8 | 27.2% | Apr 23, 2020 | An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gai... |
| CVE-2020-11940 | HIGH | 7.5 | 1.3% | Apr 23, 2020 | In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positione... |
| CVE-2020-11939 | CRITICAL | 9.8 | 3.3% | Apr 23, 2020 | In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlle... |
| CVE-2020-11806 | MEDIUM | 5.9 | 0.5% | Apr 23, 2020 | In MailStore Outlook Add-in (and Email Archive Outlook Add-in) through 12.1.2, the login process does not validate the v... |
| CVE-2020-5571 | HIGH | 7.5 | 1.2% | Apr 23, 2020 | SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQU... |
| CVE-2020-12079 | CRITICAL | 10 | 2.2% | Apr 23, 2020 | Beaker before 0.8.9 allows a sandbox escape, enabling system access and code execution. This occurs because Electron con... |
| CVE-2020-12077 | HIGH | 8.8 | 5.6% | Apr 23, 2020 | The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions wi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now