2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1707 | HIGH | 7 | 0.3% | Mar 20, 2020 | A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification ... |
| CVE-2020-1696 | MEDIUM | 5.4 | 0.8% | Mar 20, 2020 | A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly san... |
| CVE-2020-10597 | HIGH | 7.1 | 0.8% | Mar 20, 2020 | Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be ex... |
| CVE-2020-10682 | HIGH | 7.8 | 1.9% | Mar 20, 2020 | The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1... |
| CVE-2020-10681 | MEDIUM | 5.4 | 0.6% | Mar 20, 2020 | The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by m1_files[] to admin/modulei... |
| CVE-2020-9345 | MEDIUM | 6.5 | 0.9% | Mar 20, 2020 | An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is poss... |
| CVE-2020-9344 | MEDIUM | 6.1 | 5.2% | Mar 20, 2020 | Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations. |
| CVE-2020-9343 | MEDIUM | 6.5 | 0.9% | Mar 20, 2020 | An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is poss... |
| CVE-2020-10669 | HIGH | 7.5 | 3.5% | Mar 19, 2020 | The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to authentication bypass on the... |
| CVE-2020-7006 | HIGH | 8.4 | 1.7% | Mar 19, 2020 | Systech Corporation NDS-5000 Terminal Server, NDS/5008 (8 Port, RJ45), firmware Version 02D.30. Successful exploitation ... |
| CVE-2020-10671 | HIGH | 8.8 | 0.7% | Mar 19, 2020 | The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections. This is a system-... |
| CVE-2020-10670 | MEDIUM | 6.1 | 0.9% | Mar 19, 2020 | The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in the paramet... |
| CVE-2020-10668 | MEDIUM | 6.1 | 1.4% | Mar 19, 2020 | The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in /home.jsp. ... |
| CVE-2020-10667 | MEDIUM | 6.1 | 1.7% | Mar 19, 2020 | The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Stored XSS in /TemplateManag... |
| CVE-2020-5267 | MEDIUM | 4.8 | 1.5% | Mar 19, 2020 | In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript lite... |
| CVE-2020-5262 | MEDIUM | 5.5 | 0.5% | Mar 19, 2020 | In EasyBuild before version 4.1.2, the GitHub Personal Access Token (PAT) used by EasyBuild for the GitHub integration f... |
| CVE-2020-3266 | HIGH | 7.8 | 0.6% | Mar 19, 2020 | A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbi... |
| CVE-2020-3265 | HIGH | 7.8 | 0.4% | Mar 19, 2020 | A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to ... |
| CVE-2020-3264 | HIGH | 7.1 | 0.7% | Mar 19, 2020 | A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflo... |
| CVE-2020-1705 | HIGH | 7 | 0.3% | Mar 19, 2020 | A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an i... |
| CVE-2020-10678 | HIGH | 8.8 | 1.0% | Mar 19, 2020 | In Octopus Deploy before 2020.1.5, for customers running on-premises Active Directory linked to their Octopus server, an... |
| CVE-2020-4205 | MEDIUM | 6.3 | 0.5% | Mar 19, 2020 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass security restrictions, a... |
| CVE-2020-4203 | MEDIUM | 4.9 | 1.3% | Mar 19, 2020 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privile... |
| CVE-2020-10675 | HIGH | 7.5 | 2.5% | Mar 19, 2020 | The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via... |
| CVE-2020-10648 | HIGH | 7.8 | 1.3% | Mar 19, 2020 | Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now