2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-2132 | MEDIUM | 6.5 | 0.9% | Feb 12, 2020 | Jenkins Parasoft Environment Manager Plugin 2.14 and earlier stores a password unencrypted in job config.xml files on th... |
| CVE-2020-2131 | MEDIUM | 6.5 | 0.9% | Feb 12, 2020 | Jenkins Harvest SCM Plugin 0.5.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins master ... |
| CVE-2020-2130 | MEDIUM | 6.5 | 0.9% | Feb 12, 2020 | Jenkins Harvest SCM Plugin 0.5.1 and earlier stores a password unencrypted in its global configuration file on the Jenki... |
| CVE-2020-2129 | MEDIUM | 6.5 | 0.9% | Feb 12, 2020 | Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenk... |
| CVE-2020-2128 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | Jenkins ECX Copy Data Management Plugin 1.9 and earlier stores a password unencrypted in job config.xml files on the Jen... |
| CVE-2020-2127 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configura... |
| CVE-2020-2126 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins mast... |
| CVE-2020-2125 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration... |
| CVE-2020-2124 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files... |
| CVE-2020-2123 | HIGH | 8.8 | 2.3% | Feb 12, 2020 | Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary typ... |
| CVE-2020-2122 | MEDIUM | 5.4 | 0.8% | Feb 12, 2020 | Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resu... |
| CVE-2020-2121 | HIGH | 8.8 | 2.7% | Feb 12, 2020 | Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiatio... |
| CVE-2020-2120 | HIGH | 8.8 | 1.1% | Feb 12, 2020 | Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2020-2119 | MEDIUM | 5.3 | 0.9% | Feb 12, 2020 | Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins c... |
| CVE-2020-2118 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allow... |
| CVE-2020-2117 | MEDIUM | 4.3 | 0.7% | Feb 12, 2020 | A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers with Overall... |
| CVE-2020-2116 | HIGH | 8.8 | 0.7% | Feb 12, 2020 | A cross-site request forgery vulnerability in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attack... |
| CVE-2020-2115 | HIGH | 8.8 | 1.1% | Feb 12, 2020 | Jenkins NUnit Plugin 0.25 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2020-2114 | HIGH | 7.5 | 1.1% | Feb 12, 2020 | Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenk... |
| CVE-2020-2113 | MEDIUM | 5.4 | 0.7% | Feb 12, 2020 | Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the default value shown on the UI, resulting in a stored... |
| CVE-2020-2112 | MEDIUM | 5.4 | 0.7% | Feb 12, 2020 | Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a store... |
| CVE-2020-2111 | MEDIUM | 5.4 | 0.9% | Feb 12, 2020 | Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field... |
| CVE-2020-2110 | HIGH | 8.8 | 1.3% | Feb 12, 2020 | Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilatio... |
| CVE-2020-2109 | HIGH | 8.8 | 1.3% | Feb 12, 2020 | Sandbox protection in Jenkins Pipeline: Groovy Plugin 2.78 and earlier can be circumvented through default parameter exp... |
| CVE-2020-8894 | MEDIUM | 6.5 | 1.4% | Feb 12, 2020 | An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsCon... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now