2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9445 | MEDIUM | 6.1 | 0.7% | Apr 20, 2020 | Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality. |
| CVE-2020-9444 | MEDIUM | 6.1 | 0.7% | Apr 20, 2020 | Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality. |
| CVE-2020-9070 | MEDIUM | 5.5 | 0.6% | Apr 20, 2020 | Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulne... |
| CVE-2020-3946 | HIGH | 7.5 | 1.0% | Apr 20, 2020 | InstallBuilder AutoUpdate tool and regular installers enabling <checkForUpdates> built with versions earlier than 19.11 ... |
| CVE-2020-1803 | MEDIUM | 5.3 | 0.3% | Apr 20, 2020 | Huawei smartphones Honor V20 with versions earlier than 10.0.0.179(C636E3R4P3),versions earlier than 10.0.0.180(C185E3R3... |
| CVE-2020-10935 | MEDIUM | 5.4 | 0.7% | Apr 20, 2020 | Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover. |
| CVE-2020-11753 | HIGH | 8.8 | 1.7% | Apr 20, 2020 | An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user wi... |
| CVE-2020-5293 | MEDIUM | 6.5 | 0.7% | Apr 20, 2020 | In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations... |
| CVE-2020-5288 | MEDIUM | 6.5 | 0.7% | Apr 20, 2020 | "In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The p... |
| CVE-2020-5287 | MEDIUM | 6.5 | 0.7% | Apr 20, 2020 | In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is improper access control on customers search. The problem is... |
| CVE-2020-5286 | MEDIUM | 6.1 | 0.7% | Apr 20, 2020 | In PrestaShop between versions 1.7.4.0 and 1.7.6.5, there is a reflected XSS when uploading a wrong file. The problem is... |
| CVE-2020-5285 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is a reflected XSS with `back` parameter. The problem is fixed... |
| CVE-2020-5279 | MEDIUM | 6.5 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for ... |
| CVE-2020-5278 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.5.4.0 and 1.7.6.5, there is a reflected XSS on Exception page The problem is fixed in 1... |
| CVE-2020-5276 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.7.1.0 and 1.7.6.5, there is a reflected XSS on AdminCarts page with `cartBox` parameter... |
| CVE-2020-5272 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with `alias` and `search` pa... |
| CVE-2020-5271 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.6.0.0 and 1.7.6.5, there is a reflected XSS with `date_from` and `date_to` parameters i... |
| CVE-2020-5270 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is an open redirection when using back parameter. The impacts ... |
| CVE-2020-5269 | MEDIUM | 6.1 | 0.8% | Apr 20, 2020 | In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminFeatures page by using the `id_feat... |
| CVE-2020-5265 | MEDIUM | 6.1 | 0.7% | Apr 20, 2020 | In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminAttributesGroups page. The problem ... |
| CVE-2020-5264 | MEDIUM | 6.1 | 0.7% | Apr 20, 2020 | In PrestaShop before version 1.7.6.5, there is a reflected XSS while running the security compromised page. It allows an... |
| CVE-2020-11888 | MEDIUM | 6.1 | 1.9% | Apr 20, 2020 | python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example,... |
| CVE-2020-5569 | HIGH | 8.4 | 0.3% | Apr 20, 2020 | An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is s... |
| CVE-2020-11930 | MEDIUM | 6.1 | 4.5% | Apr 20, 2020 | The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflan... |
| CVE-2020-11928 | CRITICAL | 9.8 | 3.6% | Apr 20, 2020 | In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now