2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-0765MEDIUM5.5An information disclosure vulnerability exists in the Remote Desktop Connection Manager (RDCMan) application when it imp...
CVE-2020-0763HIGH7.8An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.T...
CVE-2020-0762HIGH7.8An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.T...
CVE-2020-0758HIGH7.5An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle p...
CVE-2020-0700MEDIUM5.4A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided inpu...
CVE-2020-0690CRITICAL9.8An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation...
CVE-2020-0684HIGH8.8A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file ...
CVE-2020-0645HIGH7.5A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft ...
CVE-2020-9464HIGH7.5A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. After an attack has occurred, t...
CVE-2020-9436HIGH8.8PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.0...
CVE-2020-9435HIGH7.5PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.0...
CVE-2020-8436MEDIUM6.1XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name paramet...
CVE-2020-8435HIGH8.1An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rm_analyti...
CVE-2020-6858MEDIUM6.5Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted u...
CVE-2020-10504MEDIUM4.3CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the ...
CVE-2020-10503MEDIUM4.3CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any comment, ...
CVE-2020-10502MEDIUM4.3CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, giv...
CVE-2020-10501MEDIUM6.5CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, gi...
CVE-2020-10500MEDIUM4.3CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any ticket, given ...
CVE-2020-10499MEDIUM4.3CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given t...
CVE-2020-10498MEDIUM6.5CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the...
CVE-2020-10497MEDIUM6.5CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via ...
CVE-2020-10496MEDIUM4.3CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the ...
CVE-2020-10495MEDIUM4.3CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, ...
CVE-2020-10494MEDIUM4.3CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now