2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8477 | HIGH | 8.8 | 1.7% | Apr 22, 2020 | The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxil... |
| CVE-2020-8474 | HIGH | 7.8 | 0.3% | Apr 22, 2020 | Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings relat... |
| CVE-2020-4085 | MEDIUM | 6.5 | 0.8% | Apr 22, 2020 | "HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace ... |
| CVE-2020-11938 | MEDIUM | 4.9 | 0.9% | Apr 22, 2020 | In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters use... |
| CVE-2020-11796 | CRITICAL | 9.8 | 1.2% | Apr 22, 2020 | In JetBrains Space through 2020-04-22, the password authentication implementation was insecure. |
| CVE-2020-11795 | HIGH | 7.5 | 0.8% | Apr 22, 2020 | In JetBrains Space through 2020-04-22, the session timeout period was configured improperly. |
| CVE-2020-11693 | HIGH | 7.5 | 1.7% | Apr 22, 2020 | JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an... |
| CVE-2020-11692 | LOW | 2.7 | 0.9% | Apr 22, 2020 | In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators. |
| CVE-2020-11691 | HIGH | 7.5 | 0.9% | Apr 22, 2020 | In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible. |
| CVE-2020-11690 | CRITICAL | 9.8 | 2.2% | Apr 22, 2020 | In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases. |
| CVE-2020-11689 | MEDIUM | 6.5 | 0.6% | Apr 22, 2020 | In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the setti... |
| CVE-2020-11688 | HIGH | 7.5 | 1.0% | Apr 22, 2020 | In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session. |
| CVE-2020-11687 | HIGH | 7.5 | 1.1% | Apr 22, 2020 | In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages. |
| CVE-2020-11686 | LOW | 2.7 | 0.7% | Apr 22, 2020 | In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings. |
| CVE-2020-11685 | HIGH | 7.5 | 0.9% | Apr 22, 2020 | In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS. |
| CVE-2020-11539 | HIGH | 8.1 | 1.0% | Apr 22, 2020 | An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pai... |
| CVE-2020-11416 | MEDIUM | 5.4 | 0.5% | Apr 22, 2020 | JetBrains Space through 2020-04-22 allows stored XSS in Chats. |
| CVE-2020-12059 | HIGH | 7.5 | 2.7% | Apr 22, 2020 | An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by ... |
| CVE-2020-12051 | HIGH | 7.5 | 1.3% | Apr 21, 2020 | The CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain sensitive hidden account infor... |
| CVE-2020-5301 | LOW | 3.1 | 0.9% | Apr 21, 2020 | SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. The module controller in `SimpleSA... |
| CVE-2020-11008 | HIGH | 7.5 | 3.9% | Apr 21, 2020 | Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host cont... |
| CVE-2020-10569 | CRITICAL | 9.8 | 3.2% | Apr 21, 2020 | SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additiona... |
| CVE-2020-8895 | HIGH | 7.8 | 0.2% | Apr 21, 2020 | Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attac... |
| CVE-2020-5268 | HIGH | 7.3 | 1.1% | Apr 21, 2020 | In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerabilit... |
| CVE-2020-1757 | HIGH | 8.1 | 1.6% | Apr 21, 2020 | A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now