2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25619 | MEDIUM | 4.4 | 0.4% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channe... |
| CVE-2020-26273 | MEDIUM | 5.2 | 0.9% | Dec 16, 2020 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery before versio... |
| CVE-2020-26259 | MEDIUM | 6.8 | 82.4% | Dec 16, 2020 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to... |
| CVE-2020-35416 | MEDIUM | 6.1 | 2.7% | Dec 15, 2020 | Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admi... |
| CVE-2020-23957 | MEDIUM | 6.1 | 0.7% | Dec 15, 2020 | Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by... |
| CVE-2020-14302 | MEDIUM | 4.9 | 1.0% | Dec 15, 2020 | A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirec... |
| CVE-2020-10770 | MEDIUM | 5.3 | 69.7% | Dec 15, 2020 | A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using... |
| CVE-2020-29486 | MEDIUM | 6 | 0.4% | Dec 15, 2020 | An issue was discovered in Xen through 4.14.x. Nodes in xenstore have an ownership. In oxenstored, a owner could give a ... |
| CVE-2020-29485 | MEDIUM | 5.5 | 0.4% | Dec 15, 2020 | An issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES request, not all tracking i... |
| CVE-2020-29484 | MEDIUM | 6 | 0.4% | Dec 15, 2020 | An issue was discovered in Xen through 4.14.x. When a Xenstore watch fires, the xenstore client that registered the watc... |
| CVE-2020-29483 | MEDIUM | 6.5 | 0.4% | Dec 15, 2020 | An issue was discovered in Xen through 4.14.x. Xenstored and guests communicate via a shared memory page using a specifi... |
| CVE-2020-29482 | MEDIUM | 6 | 0.4% | Dec 15, 2020 | An issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute paths containing a full pa... |
| CVE-2020-27147 | MEDIUM | 6.5 | 0.7% | Dec 15, 2020 | The REST API component of TIBCO Software Inc.'s TIBCO PartnerExpress contains a vulnerability that theoretically allows ... |
| CVE-2020-29571 | MEDIUM | 6.2 | 0.4% | Dec 15, 2020 | An issue was discovered in Xen through 4.14.x. A bounds check common to most operation time functions specific to FIFO e... |
| CVE-2020-29570 | MEDIUM | 6.2 | 0.4% | Dec 15, 2020 | An issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping maintained by Xen and tha... |
| CVE-2020-29568 | MEDIUM | 6.5 | 0.3% | Dec 15, 2020 | An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch event... |
| CVE-2020-29567 | MEDIUM | 6.2 | 0.4% | Dec 15, 2020 | An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors... |
| CVE-2020-29566 | MEDIUM | 5.5 | 0.4% | Dec 15, 2020 | An issue was discovered in Xen through 4.14.x. When they require assistance from the device model, x86 HVM guests must b... |
| CVE-2020-27777 | MEDIUM | 6.7 | 0.5% | Dec 15, 2020 | A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually... |
| CVE-2020-27067 | MEDIUM | 6.4 | 0.1% | Dec 15, 2020 | In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation o... |
| CVE-2020-27066 | MEDIUM | 6.7 | 0.2% | Dec 15, 2020 | In xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is a possible use after free due to improper locking. This co... |
| CVE-2020-27053 | MEDIUM | 4.4 | 0.1% | Dec 15, 2020 | In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missin... |
| CVE-2020-27047 | MEDIUM | 5.5 | 0.4% | Dec 15, 2020 | In ce_t4t_update_binary of ce_t4t.cc, there is a possible out of bounds read due to a missing bounds check. This could l... |
| CVE-2020-27046 | MEDIUM | 4.4 | 0.2% | Dec 15, 2020 | In nfc_ncif_proc_ee_action of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This co... |
| CVE-2020-27043 | MEDIUM | 4.4 | 0.1% | Dec 15, 2020 | In nfc_enabled of nfc_main.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now