2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8615 | MEDIUM | 6.5 | 8.8% | Feb 4, 2020 | A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves a... |
| CVE-2020-8517 | HIGH | 7.5 | 6.8% | Feb 4, 2020 | An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials par... |
| CVE-2020-8450 | HIGH | 7.3 | 71.8% | Feb 4, 2020 | An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer ove... |
| CVE-2020-8449 | HIGH | 7.5 | 8.3% | Feb 4, 2020 | An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests ... |
| CVE-2020-8125 | CRITICAL | 9.8 | 4.1% | Feb 4, 2020 | Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may re... |
| CVE-2020-8124 | MEDIUM | 5.3 | 1.7% | Feb 4, 2020 | Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may all... |
| CVE-2020-8123 | MEDIUM | 4.9 | 1.1% | Feb 4, 2020 | A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin ri... |
| CVE-2020-8122 | MEDIUM | 4.3 | 0.7% | Feb 4, 2020 | A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share... |
| CVE-2020-8121 | HIGH | 8.1 | 1.0% | Feb 4, 2020 | A bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the sharer. |
| CVE-2020-8120 | MEDIUM | 6.1 | 0.9% | Feb 4, 2020 | A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation. |
| CVE-2020-8119 | MEDIUM | 4.3 | 0.9% | Feb 4, 2020 | Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is op... |
| CVE-2020-8118 | MEDIUM | 5 | 1.3% | Feb 4, 2020 | An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when... |
| CVE-2020-8117 | MEDIUM | 4.3 | 0.7% | Feb 4, 2020 | Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non... |
| CVE-2020-8116 | HIGH | 7.3 | 3.1% | Feb 4, 2020 | Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an ... |
| CVE-2020-8115 | MEDIUM | 6.1 | 7.1% | Feb 4, 2020 | A reflected XSS vulnerability has been discovered in the publicly accessible afr.php delivery script of Revive Adserver ... |
| CVE-2020-6060 | HIGH | 7.5 | 2.2% | Feb 4, 2020 | A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially ... |
| CVE-2020-6059 | HIGH | 8.2 | 2.6% | Feb 4, 2020 | An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A ... |
| CVE-2020-6058 | CRITICAL | 9.1 | 2.4% | Feb 4, 2020 | An exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A ... |
| CVE-2020-7221 | HIGH | 7.8 | 0.7% | Feb 4, 2020 | mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root becau... |
| CVE-2020-4163 | HIGH | 7.2 | 1.6% | Feb 4, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user... |
| CVE-2020-3939 | MEDIUM | 6.1 | 0.7% | Feb 4, 2020 | SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Cross-Site Scripting(XSS), personal informa... |
| CVE-2020-3938 | HIGH | 7.5 | 1.5% | Feb 4, 2020 | SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to laun... |
| CVE-2020-3937 | HIGH | 7.5 | 1.4% | Feb 4, 2020 | SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries ... |
| CVE-2020-5236 | MEDIUM | 6.5 | 2.6% | Feb 4, 2020 | Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a head... |
| CVE-2020-5235 | CRITICAL | 9.8 | 1.7% | Feb 4, 2020 | There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now