2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10955 | MEDIUM | 6.5 | 1.0% | Mar 27, 2020 | GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized use... |
| CVE-2020-10954 | HIGH | 7.5 | 1.1% | Mar 27, 2020 | GitLab through 12.9 is affected by a potential DoS in repository archive download. |
| CVE-2020-10953 | HIGH | 7.5 | 1.4% | Mar 27, 2020 | In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue. |
| CVE-2020-10952 | MEDIUM | 6.5 | 0.7% | Mar 27, 2020 | GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images. |
| CVE-2020-10817 | HIGH | 8.8 | 1.8% | Mar 27, 2020 | The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress all... |
| CVE-2020-8552 | MEDIUM | 4.3 | 2.4% | Mar 27, 2020 | The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be v... |
| CVE-2020-8551 | MEDIUM | 6.5 | 1.1% | Mar 27, 2020 | The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a d... |
| CVE-2020-5863 | HIGH | 8.6 | 1.1% | Mar 27, 2020 | In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can c... |
| CVE-2020-5862 | HIGH | 7.5 | 1.1% | Mar 27, 2020 | On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.2, under certain conditions, TMM may crash or stop process... |
| CVE-2020-5861 | HIGH | 7.5 | 1.0% | Mar 27, 2020 | On BIG-IP 12.1.0-12.1.5, the TMM process may produce a core file in some cases when Ram Cache incorrectly optimizes stor... |
| CVE-2020-5860 | HIGH | 8.1 | 0.8% | Mar 27, 2020 | On BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, and 11.5.2-11.6.5.1 and BIG-IQ 7.0.0, 6.0.... |
| CVE-2020-5859 | HIGH | 7.5 | 1.0% | Mar 27, 2020 | On BIG-IP 15.1.0.1, specially formatted HTTP/3 messages may cause TMM to produce a core file. |
| CVE-2020-5858 | HIGH | 7.8 | 0.5% | Mar 27, 2020 | On BIG-IP 15.0.0-15.0.1.2, 14.1.0-14.1.2.2, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1 and BIG-IQ 7.0.0, 6.0.0-... |
| CVE-2020-5857 | HIGH | 7.5 | 1.0% | Mar 27, 2020 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, undisclosed HTTP behavior... |
| CVE-2020-7918 | MEDIUM | 5.4 | 0.7% | Mar 27, 2020 | An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read an... |
| CVE-2020-10607 | HIGH | 8.8 | 2.1% | Mar 27, 2020 | In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper... |
| CVE-2020-1773 | HIGH | 8.1 | 1.5% | Mar 27, 2020 | An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or b... |
| CVE-2020-1772 | HIGH | 7.5 | 1.6% | Mar 27, 2020 | It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid... |
| CVE-2020-1771 | MEDIUM | 5.4 | 0.8% | Mar 27, 2020 | Attacker is able craft an article with a link to the customer address book with malicious content (JavaScript). When age... |
| CVE-2020-1770 | MEDIUM | 4.3 | 1.3% | Mar 27, 2020 | Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue af... |
| CVE-2020-1769 | MEDIUM | 4.3 | 1.3% | Mar 27, 2020 | In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be co... |
| CVE-2020-10510 | MEDIUM | 6.5 | 1.1% | Mar 27, 2020 | Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. Afte... |
| CVE-2020-10509 | MEDIUM | 6.1 | 0.8% | Mar 27, 2020 | Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting (XSS), a... |
| CVE-2020-10508 | HIGH | 7.5 | 1.5% | Mar 27, 2020 | Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a spe... |
| CVE-2020-3936 | CRITICAL | 9.8 | 1.2% | Mar 27, 2020 | UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now