2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9055 | MEDIUM | 5.4 | 0.5% | Mar 30, 2020 | Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could al... |
| CVE-2020-7611 | CRITICAL | 9.8 | 1.8% | Mar 30, 2020 | All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable... |
| CVE-2020-5289 | MEDIUM | 6.5 | 1.3% | Mar 30, 2020 | In Elide before 4.5.14, it is possible for an adversary to "guess and check" the value of a model field they do not have... |
| CVE-2020-5284 | MEDIUM | 4.3 | 43.4% | Mar 30, 2020 | Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access... |
| CVE-2020-11106 | MEDIUM | 6.1 | 0.9% | Mar 30, 2020 | An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $_SESSION... |
| CVE-2020-11105 | CRITICAL | 9.8 | 2.0% | Mar 30, 2020 | An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw po... |
| CVE-2020-11104 | MEDIUM | 5.3 | 1.5% | Mar 30, 2020 | An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable i... |
| CVE-2020-10374 | CRITICAL | 9.8 | 4.7% | Mar 30, 2020 | A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command exe... |
| CVE-2020-5726 | HIGH | 7.5 | 4.2% | Mar 30, 2020 | The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A rem... |
| CVE-2020-5725 | MEDIUM | 5.9 | 1.7% | Mar 30, 2020 | The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpo... |
| CVE-2020-5724 | HIGH | 7.5 | 11.9% | Mar 30, 2020 | The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpo... |
| CVE-2020-5723 | CRITICAL | 9.8 | 5.7% | Mar 30, 2020 | The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an atta... |
| CVE-2020-5275 | HIGH | 8.1 | 1.1% | Mar 30, 2020 | In symfony/security-http before versions 4.4.7 and 5.0.7, when a `Firewall` checks access control rule, it iterate overs... |
| CVE-2020-5274 | MEDIUM | 5.4 | 1.2% | Mar 30, 2020 | In Symfony before versions 5.0.5 and 4.4.5, some properties of the Exception were not properly escaped when the `ErrorHa... |
| CVE-2020-5255 | MEDIUM | 4.3 | 1.3% | Mar 30, 2020 | In Symfony before versions 4.4.7 and 5.0.7, when a `Response` does not contain a `Content-Type` header, affected version... |
| CVE-2020-7610 | CRITICAL | 9.8 | 2.2% | Mar 30, 2020 | All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknow... |
| CVE-2020-7599 | MEDIUM | 6.5 | 0.5% | Mar 30, 2020 | All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log Fi... |
| CVE-2020-8509 | HIGH | 7.5 | 10.4% | Mar 30, 2020 | Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading t... |
| CVE-2020-10560 | MEDIUM | 5.9 | 3.8% | Mar 30, 2020 | An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak crypto... |
| CVE-2020-5527 | HIGH | 7.5 | 1.3% | Mar 30, 2020 | When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (al... |
| CVE-2020-5551 | HIGH | 8.8 | 1.4% | Mar 30, 2020 | Toyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within Bluetooth range to cause a d... |
| CVE-2020-10940 | HIGH | 7.8 | 0.3% | Mar 27, 2020 | Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service. |
| CVE-2020-6095 | HIGH | 7.5 | 2.9% | Mar 27, 2020 | An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14... |
| CVE-2020-10939 | HIGH | 7.8 | 0.3% | Mar 27, 2020 | Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation. |
| CVE-2020-10956 | CRITICAL | 9.8 | 1.4% | Mar 27, 2020 | GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now