2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10242 | MEDIUM | 6.1 | 1.0% | Mar 16, 2020 | An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the Protostar and Beez3 JavaSc... |
| CVE-2020-10241 | HIGH | 8.8 | 0.7% | Mar 16, 2020 | An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of com_templates lead to CSR... |
| CVE-2020-10240 | MEDIUM | 5.3 | 1.2% | Mar 16, 2020 | An issue was discovered in Joomla! before 3.9.16. Missing length checks in the user table can lead to the creation of us... |
| CVE-2020-10239 | HIGH | 8.8 | 2.7% | Mar 16, 2020 | An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of com_fields allows acc... |
| CVE-2020-10238 | HIGH | 7.5 | 5.6% | Mar 16, 2020 | An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading... |
| CVE-2020-10230 | CRITICAL | 9.8 | 14.7% | Mar 16, 2020 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/adm... |
| CVE-2020-1753 | MEDIUM | 5.5 | 0.5% | Mar 16, 2020 | A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prio... |
| CVE-2020-10557 | HIGH | 8.8 | 1.4% | Mar 16, 2020 | An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged ... |
| CVE-2020-9518 | MEDIUM | 5.3 | 0.9% | Mar 16, 2020 | Login filter can access configuration files vulnerability in Micro Focus Service Manager (Web Tier), affecting versions ... |
| CVE-2020-9519 | MEDIUM | 5.3 | 0.9% | Mar 16, 2020 | HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.4... |
| CVE-2020-5547 | CRITICAL | 9.8 | 2.3% | Mar 16, 2020 | Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 seri... |
| CVE-2020-5546 | HIGH | 8.8 | 0.9% | Mar 16, 2020 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in TCP function include... |
| CVE-2020-5545 | CRITICAL | 9.8 | 2.3% | Mar 16, 2020 | TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and ear... |
| CVE-2020-5544 | CRITICAL | 9.8 | 2.4% | Mar 16, 2020 | Null Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series... |
| CVE-2020-5543 | CRITICAL | 9.8 | 2.1% | Mar 16, 2020 | TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and ear... |
| CVE-2020-5542 | CRITICAL | 9.8 | 2.3% | Mar 16, 2020 | Buffer error vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D ... |
| CVE-2020-9290 | HIGH | 7.8 | 0.6% | Mar 15, 2020 | A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via netwo... |
| CVE-2020-9287 | HIGH | 7.8 | 0.6% | Mar 15, 2020 | A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via netwo... |
| CVE-2020-7607 | CRITICAL | 9.8 | 2.5% | Mar 15, 2020 | gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument 'options' of the exports function in ... |
| CVE-2020-7606 | CRITICAL | 9.8 | 2.6% | Mar 15, 2020 | docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the fu... |
| CVE-2020-7605 | CRITICAL | 9.8 | 2.5% | Mar 15, 2020 | gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of '... |
| CVE-2020-7604 | CRITICAL | 9.8 | 2.5% | Mar 15, 2020 | pulverizr through 0.7.0 allows execution of arbitrary commands. Within "lib/job.js", the variable "filename" can be cont... |
| CVE-2020-7603 | CRITICAL | 9.8 | 2.5% | Mar 15, 2020 | closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports fun... |
| CVE-2020-7602 | CRITICAL | 9.8 | 2.5% | Mar 15, 2020 | node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" fu... |
| CVE-2020-7601 | CRITICAL | 9.8 | 2.6% | Mar 15, 2020 | gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now