2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7990 | MEDIUM | 6.1 | 0.9% | Jan 26, 2020 | Adive Framework 2.0.8 has admin/user/add userName XSS. |
| CVE-2020-7989 | MEDIUM | 6.1 | 0.9% | Jan 26, 2020 | Adive Framework 2.0.8 has admin/user/add userUsername XSS. |
| CVE-2020-7984 | HIGH | 7.5 | 2.5% | Jan 26, 2020 | SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain ad... |
| CVE-2020-3142 | HIGH | 7.5 | 1.5% | Jan 26, 2020 | A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated... |
| CVE-2020-3139 | MEDIUM | 5.3 | 1.0% | Jan 26, 2020 | A vulnerability in the out of band (OOB) management interface IP table rule programming for Cisco Application Policy Inf... |
| CVE-2020-3136 | MEDIUM | 6.1 | 0.8% | Jan 26, 2020 | A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attac... |
| CVE-2020-3134 | MEDIUM | 6.5 | 1.1% | Jan 26, 2020 | A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could... |
| CVE-2020-3131 | MEDIUM | 6.5 | 2.2% | Jan 26, 2020 | A vulnerability in the Cisco Webex Teams client for Windows could allow an authenticated, remote attacker to cause the c... |
| CVE-2020-3129 | MEDIUM | 4.8 | 0.6% | Jan 26, 2020 | A vulnerability in the web-based management interface of Cisco Unity Connection Software could allow an authenticated, r... |
| CVE-2020-3121 | MEDIUM | 6.1 | 1.1% | Jan 26, 2020 | A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an ... |
| CVE-2020-3115 | HIGH | 8.8 | 0.3% | Jan 26, 2020 | A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to... |
| CVE-2020-7981 | CRITICAL | 9.8 | 1.5% | Jan 25, 2020 | sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when within_bounding_box is used in conjunction with ... |
| CVE-2020-7980 | CRITICAL | 9.8 | 83.0% | Jan 25, 2020 | Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to th... |
| CVE-2020-7596 | HIGH | 8.8 | 1.9% | Jan 25, 2020 | Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument. |
| CVE-2020-5226 | MEDIUM | 5.4 | 0.5% | Jan 24, 2020 | Cross-site scripting in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script allows error reports to be su... |
| CVE-2020-5225 | MEDIUM | 5.4 | 0.6% | Jan 24, 2020 | Log injection in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script, which receives error reports and se... |
| CVE-2020-7964 | MEDIUM | 5.3 | 1.1% | Jan 24, 2020 | An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutat... |
| CVE-2020-7052 | MEDIUM | 6.5 | 1.9% | Jan 24, 2020 | CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a r... |
| CVE-2020-5224 | HIGH | 8.8 | 0.4% | Jan 24, 2020 | In Django User Sessions (django-user-sessions) before 1.7.1, the views provided allow users to terminate specific sessio... |
| CVE-2020-6966 | CRITICAL | 10 | 2.2% | Jan 24, 2020 | In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center... |
| CVE-2020-6965 | CRITICAL | 9.9 | 1.1% | Jan 24, 2020 | In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center... |
| CVE-2020-6964 | HIGH | 8.6 | 1.4% | Jan 24, 2020 | In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center... |
| CVE-2020-6963 | CRITICAL | 10 | 2.7% | Jan 24, 2020 | In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center... |
| CVE-2020-6962 | CRITICAL | 10 | 4.9% | Jan 24, 2020 | In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Cente... |
| CVE-2020-6961 | CRITICAL | 10 | 1.6% | Jan 24, 2020 | In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Cente... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now