2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36170 | MEDIUM | 5.3 | 1.1% | Jan 6, 2021 | The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms. |
| CVE-2020-4336 | MEDIUM | 5.3 | 1.0% | Jan 6, 2021 | IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosur... |
| CVE-2020-7336 | MEDIUM | 6.5 | 0.5% | Jan 5, 2021 | Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prio... |
| CVE-2020-35170 | MEDIUM | 5.4 | 0.6% | Jan 5, 2021 | Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, a... |
| CVE-2020-29502 | MEDIUM | 6.7 | 0.2% | Jan 5, 2021 | Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore X ... |
| CVE-2020-29501 | MEDIUM | 6.7 | 0.2% | Jan 5, 2021 | Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore X ... |
| CVE-2020-29500 | MEDIUM | 6.7 | 0.2% | Jan 5, 2021 | Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore T ... |
| CVE-2020-29490 | MEDIUM | 6.5 | 1.5% | Jan 5, 2021 | Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS ... |
| CVE-2020-29489 | MEDIUM | 6.7 | 0.2% | Jan 5, 2021 | Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contains a plain-text password storage vulnerabil... |
| CVE-2020-26199 | MEDIUM | 6.7 | 0.3% | Jan 5, 2021 | Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a plain-text password storage vulnerabili... |
| CVE-2020-23249 | MEDIUM | 4.7 | 0.4% | Jan 5, 2021 | GigaVUE-OS (GVOS) 5.4 - 5.9 stores a Redis database password in plaintext. |
| CVE-2020-36159 | MEDIUM | 5.3 | 0.9% | Jan 5, 2021 | Veritas Desktop and Laptop Option (DLO) before 9.5 disclosed operational information on the backup processing status thr... |
| CVE-2020-27845 | MEDIUM | 5.5 | 1.5% | Jan 5, 2021 | There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrust... |
| CVE-2020-27843 | MEDIUM | 5.5 | 1.7% | Jan 5, 2021 | A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input... |
| CVE-2020-27842 | MEDIUM | 5.5 | 1.4% | Jan 5, 2021 | There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to ... |
| CVE-2020-27841 | MEDIUM | 5.5 | 1.4% | Jan 5, 2021 | There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide craft... |
| CVE-2020-7202 | MEDIUM | 5.3 | 1.5% | Jan 5, 2021 | A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out ... |
| CVE-2020-4761 | MEDIUM | 5.3 | 1.3% | Jan 5, 2021 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow... |
| CVE-2020-26046 | MEDIUM | 5.4 | 0.7% | Jan 5, 2021 | FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicio... |
| CVE-2020-36158 | MEDIUM | 6.7 | 2.2% | Jan 5, 2021 | mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might ... |
| CVE-2020-29498 | MEDIUM | 6.1 | 1.1% | Jan 4, 2021 | Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attack... |
| CVE-2020-29497 | MEDIUM | 5.4 | 0.8% | Jan 4, 2021 | Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authentic... |
| CVE-2020-29496 | MEDIUM | 4.8 | 0.8% | Jan 4, 2021 | Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authentic... |
| CVE-2020-26297 | MEDIUM | 6.1 | 1.3% | Jan 4, 2021 | mdBook is a utility to create modern online books from Markdown files and is written in Rust. In mdBook before version 0... |
| CVE-2020-26294 | MEDIUM | 5.3 | 1.8% | Jan 4, 2021 | Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now