2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10247 | MEDIUM | 6.1 | 0.8% | Mar 9, 2020 | MISP 2.4.122 has Persistent XSS in the sighting popover tool. This is related to app/View/Elements/Events/View/sighting_... |
| CVE-2020-10246 | MEDIUM | 6.1 | 0.8% | Mar 9, 2020 | MISP 2.4.122 has reflected XSS via unsanitized URL parameters. This is related to app/View/Users/statistics_orgs.ctp. |
| CVE-2020-10244 | HIGH | 7.5 | 0.7% | Mar 9, 2020 | JPaseto before 0.3.0 generates weak hashes when using v2.local tokens. |
| CVE-2020-10192 | MEDIUM | 6.1 | 0.8% | Mar 9, 2020 | An issue was discovered in Munkireport before 5.3.0.3923. An unauthenticated actor can send a custom XSS payload through... |
| CVE-2020-10191 | MEDIUM | 5.4 | 0.6% | Mar 9, 2020 | An issue was discovered in MunkiReport before 5.3.0. An authenticated actor can send a custom XSS payload through the /m... |
| CVE-2020-10190 | HIGH | 8.8 | 1.2% | Mar 9, 2020 | An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tab... |
| CVE-2020-8987 | HIGH | 7.4 | 0.5% | Mar 9, 2020 | Avast AntiTrack before 1.5.1.172 and AVG Antitrack before 2.0.0.178 proxies traffic to HTTPS sites but does not validate... |
| CVE-2020-4084 | MEDIUM | 5.4 | 0.5% | Mar 9, 2020 | HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed ar... |
| CVE-2020-9517 | MEDIUM | 5.4 | 0.5% | Mar 9, 2020 | There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Co... |
| CVE-2020-9386 | MEDIUM | 4.3 | 1.0% | Mar 9, 2020 | In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata information is disclosed t... |
| CVE-2020-5256 | HIGH | 8.8 | 2.0% | Mar 9, 2020 | BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, ... |
| CVE-2020-2159 | HIGH | 8.8 | 2.0% | Mar 9, 2020 | Jenkins CryptoMove Plugin 0.1.33 and earlier allows attackers with Job/Configure access to execute arbitrary OS commands... |
| CVE-2020-2158 | HIGH | 8.8 | 2.9% | Mar 9, 2020 | Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary typ... |
| CVE-2020-2157 | MEDIUM | 4.3 | 0.5% | Mar 9, 2020 | Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configurat... |
| CVE-2020-2156 | MEDIUM | 4.3 | 0.6% | Mar 9, 2020 | Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration ... |
| CVE-2020-2155 | MEDIUM | 5.3 | 0.6% | Mar 9, 2020 | Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global... |
| CVE-2020-2154 | MEDIUM | 5.5 | 0.3% | Mar 9, 2020 | Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configur... |
| CVE-2020-2153 | MEDIUM | 4.3 | 0.6% | Mar 9, 2020 | Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms... |
| CVE-2020-2152 | MEDIUM | 6.1 | 1.2% | Mar 9, 2020 | Jenkins Subversion Release Manager Plugin 1.2 and earlier does not escape the error message for the Repository URL field... |
| CVE-2020-2151 | MEDIUM | 5.3 | 0.7% | Mar 9, 2020 | Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkin... |
| CVE-2020-2150 | MEDIUM | 5.3 | 0.6% | Mar 9, 2020 | Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its globa... |
| CVE-2020-2149 | MEDIUM | 5.3 | 0.6% | Mar 9, 2020 | Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its glob... |
| CVE-2020-2148 | MEDIUM | 4.3 | 0.8% | Mar 9, 2020 | A missing permission check in Jenkins Mac Plugin 1.1.0 and earlier allows attackers with Overall/Read permission to conn... |
| CVE-2020-2147 | MEDIUM | 4.3 | 0.8% | Mar 9, 2020 | A cross-site request forgery vulnerability in Jenkins Mac Plugin 1.1.0 and earlier allows attackers to connect to an att... |
| CVE-2020-2146 | HIGH | 7.4 | 0.6% | Mar 9, 2020 | Jenkins Mac Plugin 1.1.0 and earlier does not validate SSH host keys when connecting agents created by the plugin, enabl... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now