2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11818 | HIGH | 8.8 | 0.8% | Apr 16, 2020 | In Rukovoditel 2.5.2 has a form_session_token value to prevent CSRF attacks. This protection mechanism can be bypassed w... |
| CVE-2020-11816 | CRITICAL | 9.8 | 1.8% | Apr 16, 2020 | Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the reports_id (POST) par... |
| CVE-2020-11815 | CRITICAL | 9.8 | 2.3% | Apr 16, 2020 | In Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the content-type value. As a re... |
| CVE-2020-11814 | MEDIUM | 5.4 | 1.0% | Apr 16, 2020 | A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users ... |
| CVE-2020-11813 | MEDIUM | 5.4 | 0.5% | Apr 16, 2020 | In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the configuration page via the copyright text input. Thus, ... |
| CVE-2020-11812 | CRITICAL | 9.8 | 1.7% | Apr 16, 2020 | Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the filters[0][value] or ... |
| CVE-2020-11811 | CRITICAL | 9.8 | 3.0% | Apr 16, 2020 | In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability w... |
| CVE-2020-11007 | MEDIUM | 6.5 | 0.9% | Apr 16, 2020 | In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated ... |
| CVE-2020-10707 | — | — | — | Apr 16, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11612. Reason: This candidate is a reservation d... |
| CVE-2020-4347 | HIGH | 7.3 | 1.8% | Apr 16, 2020 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to ... |
| CVE-2020-4338 | MEDIUM | 5.5 | 0.3% | Apr 16, 2020 | IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras... |
| CVE-2020-4260 | MEDIUM | 4.3 | 0.9% | Apr 16, 2020 | IBM UrbanCode Deploy (UCD) 7.0.5 could allow a user with special permissions to obtain sensitive information via generic... |
| CVE-2020-3653 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from users... |
| CVE-2020-3652 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack... |
| CVE-2020-3651 | HIGH | 7.5 | 0.7% | Apr 16, 2020 | Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames.... |
| CVE-2020-9280 | HIGH | 7.5 | 1.7% | Apr 15, 2020 | In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the de... |
| CVE-2020-7612 | — | — | — | Apr 15, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-5721 | MEDIUM | 5.5 | 0.4% | Apr 15, 2020 | MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the ... |
| CVE-2020-3273 | HIGH | 7.5 | 1.3% | Apr 15, 2020 | A vulnerability in the 802.11 Generic Advertisement Service (GAS) frame processing function of Cisco Wireless LAN Contro... |
| CVE-2020-3262 | HIGH | 7.5 | 1.4% | Apr 15, 2020 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol handler of Cisco Wireless LA... |
| CVE-2020-3261 | MEDIUM | 6.5 | 0.5% | Apr 15, 2020 | A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated,... |
| CVE-2020-3260 | MEDIUM | 6.5 | 0.5% | Apr 15, 2020 | A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to caus... |
| CVE-2020-3252 | MEDIUM | 6.5 | 5.3% | Apr 15, 2020 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r... |
| CVE-2020-3251 | HIGH | 8.8 | 61.5% | Apr 15, 2020 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r... |
| CVE-2020-3250 | CRITICAL | 9.8 | 60.2% | Apr 15, 2020 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now