2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8421 | MEDIUM | 6.1 | 1.0% | Jan 28, 2020 | An issue was discovered in Joomla! before 3.9.15. Inadequate escaping of usernames allows XSS attacks in com_actionlogs. |
| CVE-2020-8420 | HIGH | 8.8 | 0.8% | Jan 28, 2020 | An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of com_templates cause... |
| CVE-2020-8419 | HIGH | 8.8 | 0.5% | Jan 28, 2020 | An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components cause ... |
| CVE-2020-8417 | HIGH | 8.8 | 10.4% | Jan 28, 2020 | The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import me... |
| CVE-2020-8315 | MEDIUM | 5.5 | 1.5% | Jan 28, 2020 | In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launc... |
| CVE-2020-5211 | CRITICAL | 9.8 | 1.1% | Jan 28, 2020 | In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a... |
| CVE-2020-4207 | CRITICAL | 9.8 | 4.5% | Jan 28, 2020 | IBM Watson IoT Message Gateway 2.0.0.x, 5.0.0.0, 5.0.0.1, and 5.0.0.2 is vulnerable to a buffer overflow, caused by impr... |
| CVE-2020-8112 | HIGH | 8.8 | 3.6% | Jan 28, 2020 | opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in th... |
| CVE-2020-5214 | CRITICAL | 9.8 | 1.1% | Jan 28, 2020 | In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash... |
| CVE-2020-5213 | CRITICAL | 9.8 | 1.1% | Jan 28, 2020 | In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow result... |
| CVE-2020-5212 | CRITICAL | 9.8 | 1.1% | Jan 28, 2020 | In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow... |
| CVE-2020-5210 | HIGH | 7.8 | 0.8% | Jan 28, 2020 | In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a cr... |
| CVE-2020-5209 | HIGH | 7.8 | 0.8% | Jan 28, 2020 | In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or re... |
| CVE-2020-8086 | CRITICAL | 9.8 | 1.6% | Jan 28, 2020 | The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP addre... |
| CVE-2020-1940 | HIGH | 7.5 | 4.5% | Jan 28, 2020 | The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 a... |
| CVE-2020-7934 | MEDIUM | 5.4 | 4.5% | Jan 28, 2020 | In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyA... |
| CVE-2020-7799 | HIGH | 7.2 | 19.8% | Jan 28, 2020 | An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Se... |
| CVE-2020-5523 | HIGH | 7.4 | 1.2% | Jan 28, 2020 | Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificat... |
| CVE-2020-7998 | HIGH | 8.8 | 1.5% | Jan 28, 2020 | An arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1 for iOS. The vulnerabili... |
| CVE-2020-7997 | MEDIUM | 6.1 | 0.7% | Jan 28, 2020 | ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices allow XSS via the Client Name field to the Parental Control feature. |
| CVE-2020-1933 | MEDIUM | 6.1 | 2.8% | Jan 28, 2020 | A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through acti... |
| CVE-2020-1932 | MEDIUM | 6.5 | 1.4% | Jan 28, 2020 | An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Su... |
| CVE-2020-1928 | MEDIUM | 5.3 | 4.0% | Jan 28, 2020 | An information disclosure vulnerability was found in Apache NiFi 1.10.0. The sensitive parameter parser would log parsed... |
| CVE-2020-0549 | MEDIUM | 5.5 | 0.6% | Jan 28, 2020 | Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially ... |
| CVE-2020-0548 | MEDIUM | 5.5 | 0.5% | Jan 28, 2020 | Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now