2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-2097 | HIGH | 8.8 | 1.2% | Jan 15, 2020 | Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing at... |
| CVE-2020-2096 | MEDIUM | 6.1 | 89.4% | Jan 15, 2020 | Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a ref... |
| CVE-2020-2095 | MEDIUM | 4.3 | 0.9% | Jan 15, 2020 | Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on ... |
| CVE-2020-2094 | MEDIUM | 4.3 | 0.8% | Jan 15, 2020 | A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/R... |
| CVE-2020-2093 | HIGH | 8.8 | 0.8% | Jan 15, 2020 | A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attacker... |
| CVE-2020-2092 | HIGH | 8.8 | 1.4% | Jan 15, 2020 | Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) ... |
| CVE-2020-2091 | HIGH | 8.1 | 1.1% | Jan 15, 2020 | A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers with Overall/Read permission t... |
| CVE-2020-2090 | HIGH | 8.8 | 0.8% | Jan 15, 2020 | A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to ... |
| CVE-2020-1611 | MEDIUM | 6.5 | 1.7% | Jan 15, 2020 | A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target ... |
| CVE-2020-1609 | HIGH | 8.8 | 0.9% | Jan 15, 2020 | When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos O... |
| CVE-2020-1608 | HIGH | 7.5 | 1.3% | Jan 15, 2020 | Receipt of a specific MPLS or IPv6 packet on the core facing interface of an MX Series device configured for Broadband E... |
| CVE-2020-1607 | MEDIUM | 6.1 | 0.9% | Jan 15, 2020 | Insufficient Cross-Site Scripting (XSS) protection in J-Web may potentially allow a remote attacker to inject web script... |
| CVE-2020-1606 | HIGH | 8.1 | 0.9% | Jan 15, 2020 | A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read fil... |
| CVE-2020-1605 | HIGH | 8.8 | 0.8% | Jan 15, 2020 | When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos O... |
| CVE-2020-1604 | MEDIUM | 5.3 | 0.8% | Jan 15, 2020 | On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewa... |
| CVE-2020-1603 | HIGH | 8.6 | 1.4% | Jan 15, 2020 | Specific IPv6 packets sent by clients processed by the Routing Engine (RE) are improperly handled. These IPv6 packets ar... |
| CVE-2020-1602 | HIGH | 8.8 | 0.8% | Jan 15, 2020 | When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos O... |
| CVE-2020-1601 | HIGH | 7.5 | 1.1% | Jan 15, 2020 | Certain types of malformed Path Computation Element Protocol (PCEP) packets when received and processed by a Juniper Net... |
| CVE-2020-1600 | MEDIUM | 6.5 | 1.2% | Jan 15, 2020 | In a Point-to-Multipoint (P2MP) Label Switched Path (LSP) scenario, an uncontrolled resource consumption vulnerability i... |
| CVE-2020-7058 | HIGH | 8.8 | 2.3% | Jan 15, 2020 | data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input M... |
| CVE-2020-5502 | MEDIUM | 6.5 | 0.4% | Jan 15, 2020 | phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships. |
| CVE-2020-5501 | MEDIUM | 4.3 | 0.4% | Jan 15, 2020 | phpBB 3.2.8 allows a CSRF attack that can modify a group avatar. |
| CVE-2020-0656 | MEDIUM | 5.4 | 1.5% | Jan 14, 2020 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a speci... |
| CVE-2020-0654 | CRITICAL | 9.1 | 3.5% | Jan 14, 2020 | A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to byp... |
| CVE-2020-0653 | HIGH | 7.8 | 20.4% | Jan 14, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now