2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10393 | MEDIUM | 4.8 | 0.6% | Mar 12, 2020 | The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting a... |
| CVE-2020-10392 | MEDIUM | 4.8 | 0.6% | Mar 12, 2020 | The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting a... |
| CVE-2020-10391 | MEDIUM | 4.8 | 0.7% | Mar 12, 2020 | The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting a... |
| CVE-2020-10390 | HIGH | 7.2 | 4.3% | Mar 12, 2020 | OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Stand... |
| CVE-2020-10389 | HIGH | 7.2 | 4.9% | Mar 12, 2020 | admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by i... |
| CVE-2020-10388 | MEDIUM | 5.4 | 0.6% | Mar 12, 2020 | The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execu... |
| CVE-2020-10387 | MEDIUM | 4.9 | 7.8% | Mar 12, 2020 | Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files... |
| CVE-2020-10386 | HIGH | 7.2 | 12.3% | Mar 12, 2020 | admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Exe... |
| CVE-2020-10109 | CRITICAL | 9.8 | 3.3% | Mar 12, 2020 | In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length ... |
| CVE-2020-10108 | CRITICAL | 9.8 | 4.1% | Mar 12, 2020 | In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-lengt... |
| CVE-2020-7254 | HIGH | 7.8 | 0.3% | Mar 12, 2020 | Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.... |
| CVE-2020-7253 | MEDIUM | 4.4 | 0.2% | Mar 12, 2020 | Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administr... |
| CVE-2020-7943 | HIGH | 7.5 | 7.9% | Mar 11, 2020 | Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For Pup... |
| CVE-2020-7598 | MEDIUM | 5.6 | 1.9% | Mar 11, 2020 | minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or ... |
| CVE-2020-5958 | HIGH | 7.8 | 0.4% | Mar 11, 2020 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which... |
| CVE-2020-1947 | CRITICAL | 9.8 | 33.9% | Mar 11, 2020 | In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for... |
| CVE-2020-9408 | HIGH | 8.8 | 1.3% | Mar 11, 2020 | The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO ... |
| CVE-2020-1981 | HIGH | 7.8 | 0.4% | Mar 11, 2020 | A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local at... |
| CVE-2020-1980 | HIGH | 7.8 | 0.6% | Mar 11, 2020 | A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted she... |
| CVE-2020-1979 | HIGH | 7.8 | 1.0% | Mar 11, 2020 | A format string vulnerability in the PAN-OS log daemon (logd) on Panorama allows a network based attacker with knowledge... |
| CVE-2020-1733 | MEDIUM | 5 | 0.4% | Mar 11, 2020 | A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a play... |
| CVE-2020-8540 | CRITICAL | 9.8 | 12.5% | Mar 11, 2020 | An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows rem... |
| CVE-2020-10181 | CRITICAL | 9.8 | 14.2% | Mar 11, 2020 | goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevate... |
| CVE-2020-5203 | CRITICAL | 9.8 | 2.1% | Mar 11, 2020 | In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled... |
| CVE-2020-10376 | CRITICAL | 9.8 | 1.1% | Mar 11, 2020 | Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now