2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8440 | CRITICAL | 9.8 | 2.8% | Jan 31, 2020 | controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by ... |
| CVE-2020-7956 | CRITICAL | 9.8 | 1.0% | Jan 31, 2020 | HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates use... |
| CVE-2020-7955 | MEDIUM | 5.3 | 1.4% | Jan 31, 2020 | HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resu... |
| CVE-2020-7914 | HIGH | 7.5 | 1.9% | Jan 31, 2020 | In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over t... |
| CVE-2020-7219 | HIGH | 7.5 | 2.0% | Jan 31, 2020 | HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were suscepti... |
| CVE-2020-7218 | HIGH | 7.5 | 1.5% | Jan 31, 2020 | HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptib... |
| CVE-2020-5526 | MEDIUM | 5.9 | 0.5% | Jan 31, 2020 | The AWMS Mobile App for Android 2.0.0 to 2.0.5 and for iOS 2.0.0 to 2.0.8 does not verify X.509 certificates from server... |
| CVE-2020-5232 | HIGH | 8.7 | 1.2% | Jan 31, 2020 | A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ... |
| CVE-2020-8498 | MEDIUM | 5.4 | 1.2% | Jan 30, 2020 | XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gist... |
| CVE-2020-8496 | MEDIUM | 4.8 | 0.5% | Jan 30, 2020 | In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability b... |
| CVE-2020-8495 | HIGH | 7.5 | 3.1% | Jan 30, 2020 | In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate se... |
| CVE-2020-8494 | HIGH | 8.8 | 1.1% | Jan 30, 2020 | In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser se... |
| CVE-2020-8493 | MEDIUM | 4.8 | 1.5% | Jan 30, 2020 | A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via... |
| CVE-2020-5231 | MEDIUM | 6.5 | 0.6% | Jan 30, 2020 | In Opencast before 7.6 and 8.1, users with the role ROLE_COURSE_ADMIN can use the user-utils endpoint to create new user... |
| CVE-2020-5206 | CRITICAL | 10 | 1.3% | Jan 30, 2020 | In Opencast before 7.6 and 8.1, using a remember-me cookie with an arbitrary username can cause Opencast to assume prope... |
| CVE-2020-8095 | MEDIUM | 5.5 | 0.5% | Jan 30, 2020 | A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an at... |
| CVE-2020-5230 | HIGH | 7.5 | 1.2% | Jan 30, 2020 | Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be ... |
| CVE-2020-5222 | HIGH | 8.8 | 0.9% | Jan 30, 2020 | Opencast before 7.6 and 8.1 enables a remember-me cookie based on a hash created from the username, password, and an add... |
| CVE-2020-5229 | HIGH | 8.1 | 0.6% | Jan 30, 2020 | Opencast before 8.1 stores passwords using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthe... |
| CVE-2020-5228 | HIGH | 7.5 | 1.0% | Jan 30, 2020 | Opencast before 8.1 and 7.6 allows unauthorized public access to all media and metadata by default via OAI-PMH. OAI-PMH ... |
| CVE-2020-8492 | MEDIUM | 6.5 | 6.6% | Jan 30, 2020 | Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTT... |
| CVE-2020-8093 | HIGH | 7.8 | 0.4% | Jan 30, 2020 | A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a li... |
| CVE-2020-5233 | MEDIUM | 6.1 | 1.1% | Jan 30, 2020 | OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an atta... |
| CVE-2020-3147 | HIGH | 7.5 | 2.3% | Jan 30, 2020 | A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause ... |
| CVE-2020-8092 | MEDIUM | 5.5 | 0.3% | Jan 30, 2020 | A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to ob... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now