2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5549 | HIGH | 8.8 | 0.9% | Apr 8, 2020 | Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and Enterprise Ver. 2.0.1 and ... |
| CVE-2020-10633 | MEDIUM | 6.1 | 0.7% | Apr 8, 2020 | A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to ... |
| CVE-2020-11631 | MEDIUM | 6.5 | 1.1% | Apr 8, 2020 | An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. An error state can be generated in the CA UI by... |
| CVE-2020-11630 | CRITICAL | 9.8 | 1.3% | Apr 8, 2020 | An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. In several sections of code, the verification o... |
| CVE-2020-11629 | HIGH | 7.2 | 0.6% | Apr 8, 2020 | An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. The External Command Certificate Validator, whi... |
| CVE-2020-11628 | MEDIUM | 5.3 | 0.9% | Apr 8, 2020 | An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. It is intended to support restriction of availa... |
| CVE-2020-11627 | HIGH | 8.8 | 0.5% | Apr 8, 2020 | An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. A Cross Site Request Forgery (CSRF) issue has b... |
| CVE-2020-11626 | MEDIUM | 6.1 | 0.4% | Apr 8, 2020 | An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. Two Cross Side Scripting (XSS) vulnerabilities ... |
| CVE-2020-11543 | CRITICAL | 9.8 | 2.6% | Apr 8, 2020 | OpsRamp Gateway before 7.0.0 has a backdoor account vadmin with the password 9vt@f3Vt that allows root SSH access to the... |
| CVE-2020-10366 | HIGH | 7.5 | 1.5% | Apr 8, 2020 | LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-... |
| CVE-2020-11620 | HIGH | 8.1 | 5.8% | Apr 7, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-11619 | HIGH | 8.1 | 3.7% | Apr 7, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-9286 | MEDIUM | 6.5 | 1.2% | Apr 7, 2020 | An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform... |
| CVE-2020-6647 | MEDIUM | 5.4 | 0.6% | Apr 7, 2020 | An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to pe... |
| CVE-2020-11509 | MEDIUM | 6.1 | 1.9% | Apr 7, 2020 | An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page temp... |
| CVE-2020-11508 | MEDIUM | 5.4 | 0.8% | Apr 7, 2020 | An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permiss... |
| CVE-2020-6974 | CRITICAL | 9.8 | 1.9% | Apr 7, 2020 | Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to b... |
| CVE-2020-11612 | HIGH | 7.5 | 9.4% | Apr 7, 2020 | The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte st... |
| CVE-2020-11611 | MEDIUM | 6.1 | 0.9% | Apr 7, 2020 | An issue was discovered in xdLocalStorage through 2.0.5. The buildMessage() function in xdLocalStorage.js specifies the ... |
| CVE-2020-11610 | HIGH | 8.8 | 1.4% | Apr 7, 2020 | An issue was discovered in xdLocalStorage through 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js spec... |
| CVE-2020-9514 | MEDIUM | 6.5 | 1.0% | Apr 7, 2020 | An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in... |
| CVE-2020-11609 | MEDIUM | 4.3 | 0.6% | Apr 7, 2020 | An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06... |
| CVE-2020-11560 | HIGH | 7.8 | 1.0% | Apr 7, 2020 | NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file. |
| CVE-2020-11516 | MEDIUM | 5.4 | 0.7% | Apr 7, 2020 | Stored XSS in the Contact Form 7 Datepicker plugin through 2.6.0 for WordPress allows authenticated attackers with minim... |
| CVE-2020-11515 | MEDIUM | 6.1 | 2.1% | Apr 7, 2020 | The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that red... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now