2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-2167 | HIGH | 8.8 | 2.1% | Mar 25, 2020 | Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of ... |
| CVE-2020-2166 | HIGH | 8.8 | 2.0% | Mar 25, 2020 | Jenkins Pipeline: AWS Steps Plugin 1.40 and earlier does not configure its YAML parser to prevent the instantiation of a... |
| CVE-2020-2165 | HIGH | 7.5 | 1.1% | Mar 25, 2020 | Jenkins Artifactory Plugin 3.6.0 and earlier transmits configured passwords in plain text as part of its global Jenkins ... |
| CVE-2020-2164 | MEDIUM | 6.5 | 0.8% | Mar 25, 2020 | Jenkins Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password unencrypted in its global configurat... |
| CVE-2020-2163 | MEDIUM | 5.4 | 1.2% | Mar 25, 2020 | Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, result... |
| CVE-2020-2162 | MEDIUM | 5.4 | 1.2% | Mar 25, 2020 | Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not set Content-Security-Policy headers for files uploaded as fi... |
| CVE-2020-2161 | MEDIUM | 5.4 | 1.2% | Mar 25, 2020 | Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not properly escape node labels that are shown in the form valid... |
| CVE-2020-2160 | HIGH | 8.8 | 2.0% | Mar 25, 2020 | Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows att... |
| CVE-2020-10649 | HIGH | 7.8 | 0.6% | Mar 25, 2020 | DevActSvc.exe in ASUS Device Activation before 1.0.7.0 for Windows 10 notebooks and PCs could lead to unsigned code exec... |
| CVE-2020-3799 | CRITICAL | 9.8 | 6.3% | Mar 25, 2020 | Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20... |
| CVE-2020-3797 | CRITICAL | 9.8 | 3.9% | Mar 25, 2020 | Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20... |
| CVE-2020-3795 | CRITICAL | 9.8 | 4.2% | Mar 25, 2020 | Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20... |
| CVE-2020-3793 | CRITICAL | 9.8 | 4.9% | Mar 25, 2020 | Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20... |
| CVE-2020-3792 | CRITICAL | 9.8 | 4.9% | Mar 25, 2020 | Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20... |
| CVE-2020-1957 | CRITICAL | 9.8 | 24.2% | Mar 25, 2020 | Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may caus... |
| CVE-2020-9375 | HIGH | 7.5 | 28.2% | Mar 25, 2020 | TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a ... |
| CVE-2020-10788 | CRITICAL | 9.1 | 1.6% | Mar 25, 2020 | openITCOCKPIT before 3.7.3 uses the 1fea123e07f730f76e661bced33a94152378611e API key rather than generating a random API... |
| CVE-2020-10791 | MEDIUM | 6.5 | 1.2% | Mar 25, 2020 | app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authe... |
| CVE-2020-10790 | MEDIUM | 5.4 | 0.9% | Mar 25, 2020 | openITCOCKPIT before 3.7.3 has unnecessary files (such as Lodash files) under the web root, which leads to XSS. |
| CVE-2020-10789 | CRITICAL | 9.8 | 1.9% | Mar 25, 2020 | openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell met... |
| CVE-2020-5561 | CRITICAL | 9.8 | 2.3% | Mar 25, 2020 | Keijiban Tsumiki v1.15 allows remote attackers to execute arbitrary OS commands via unspecified vectors. |
| CVE-2020-5560 | CRITICAL | 9.8 | 2.3% | Mar 25, 2020 | WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unsp... |
| CVE-2020-5559 | MEDIUM | 6.1 | 0.8% | Mar 25, 2020 | Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTM... |
| CVE-2020-5558 | HIGH | 8.8 | 2.1% | Mar 25, 2020 | CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors. |
| CVE-2020-5557 | MEDIUM | 6.1 | 0.8% | Mar 25, 2020 | Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now