2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10211 | CRITICAL | 9.8 | 3.0% | Apr 17, 2020 | A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthent... |
| CVE-2020-11872 | HIGH | 7.5 | 0.7% | Apr 17, 2020 | The Cloud Functions subsystem in OpenTrace 1.0 might allow fabrication attacks by making billions of TempID requests bef... |
| CVE-2020-11868 | HIGH | 7.5 | 2.1% | Apr 17, 2020 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronizatio... |
| CVE-2020-5294 | MEDIUM | 5.4 | 0.7% | Apr 16, 2020 | PrestaShop module ps_facetedsearch versions before 2.1.0 has a reflected XSS with social networks fields The problem is ... |
| CVE-2020-5273 | MEDIUM | 5.4 | 0.7% | Apr 16, 2020 | In PrestaShop module ps_linklist versions before 3.1.0, there is a stored XSS when using custom URLs. The problem is fix... |
| CVE-2020-5266 | MEDIUM | 5.4 | 0.6% | Apr 16, 2020 | In the ps_link module for PrestaShop before version 3.1.0, there is a stored XSS when you create or edit a link list blo... |
| CVE-2020-7486 | HIGH | 7.5 | 1.6% | Apr 16, 2020 | **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in... |
| CVE-2020-7485 | CRITICAL | 9.8 | 1.8% | Apr 16, 2020 | **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier c... |
| CVE-2020-7484 | HIGH | 7.5 | 1.3% | Apr 16, 2020 | **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability with the former 'password' feature could allow a denial of servi... |
| CVE-2020-7483 | HIGH | 7.5 | 0.9% | Apr 16, 2020 | **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause certain data to be visible on the network when the '... |
| CVE-2020-7224 | CRITICAL | 9.8 | 2.3% | Apr 16, 2020 | The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered... |
| CVE-2020-7114 | CRITICAL | 9.8 | 1.1% | Apr 16, 2020 | A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, ... |
| CVE-2020-7113 | MEDIUM | 4.9 | 0.9% | Apr 16, 2020 | A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to inte... |
| CVE-2020-7111 | HIGH | 7.2 | 1.9% | Apr 16, 2020 | A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Co... |
| CVE-2020-7110 | MEDIUM | 4.8 | 0.6% | Apr 16, 2020 | ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administr... |
| CVE-2020-2180 | HIGH | 8.8 | 2.3% | Apr 16, 2020 | Jenkins AWS SAM Plugin 1.2.2 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary ty... |
| CVE-2020-2179 | HIGH | 8.8 | 2.9% | Apr 16, 2020 | Jenkins Yaml Axis Plugin 0.2.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary ... |
| CVE-2020-2178 | HIGH | 7.1 | 0.9% | Apr 16, 2020 | Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity (XX... |
| CVE-2020-2177 | MEDIUM | 4.3 | 0.5% | Apr 16, 2020 | Jenkins Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where t... |
| CVE-2020-1964 | CRITICAL | 9.8 | 4.8% | Apr 16, 2020 | It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not ... |
| CVE-2020-11826 | HIGH | 7.5 | 0.5% | Apr 16, 2020 | Users can lock their notes with a password in Memono version 3.8. Thus, users needs to know a password to read notes. Ho... |
| CVE-2020-11825 | HIGH | 8.8 | 1.0% | Apr 16, 2020 | In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any use... |
| CVE-2020-11823 | MEDIUM | 5.4 | 0.7% | Apr 16, 2020 | In Dolibarr 10.0.6, if USER_LOGIN_FAILED is active, there is a stored XSS vulnerability on the admin tools --> audit pag... |
| CVE-2020-11820 | CRITICAL | 9.8 | 1.8% | Apr 16, 2020 | Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the entities_id parameter... |
| CVE-2020-11819 | CRITICAL | 9.8 | 26.8% | Apr 16, 2020 | In Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a language file and thus achieve... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now