Menu

Star on GitHub · 3.2k

2020

18,349 vulnerabilities published in 2020.

Results

7,554 of 18,349· Page 27/152
6.1
CVE-2020-17454

WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface. More precisely, it

5.9
CVE-2020-15265

In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.quantization.quantize_and_dequan

6.1
CVE-2020-27344

The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.

6.1
CVE-2020-3599

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an

5.3
CVE-2020-3585

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defens

6.1
CVE-2020-3583

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Fir

6.1
CVE-2020-3582

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Fir

6.1
CVE-2020-3581

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Fir

6.1
CVE-2020-3580KEV

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Fir

5.3
CVE-2020-3578

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Th

5.8
CVE-2020-3565

A vulnerability in the TCP Intercept functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unaut

5.3
CVE-2020-3564

A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Thr

4.7
CVE-2020-3561

A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepow

4.7
CVE-2020-3558

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an

5.3
CVE-2020-3557

A vulnerability in the host input API daemon of Cisco Firepower Management Center (FMC) Software could allow an unauthen

6.8
CVE-2020-3555

A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Th

6.1
CVE-2020-3553

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

6.1
CVE-2020-3515

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

6.7
CVE-2020-3458

Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance (ASA) Software and Firepower Th

6.7
CVE-2020-3457

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary comma

5.5
CVE-2020-3352

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker

5.8
CVE-2020-3299

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticate

6.1
CVE-2020-5650

Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arb

4.3
CVE-2020-27612

Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information

5.3
CVE-2020-27609

BigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording in the user interface.

6.1
CVE-2020-27608

In BigBlueButton before 2.2.28 (or earlier), uploaded presentations are sent to clients without a Content-Type header, w

6.5
CVE-2020-27607

In BigBlueButton before 2.2.28 (or earlier), the client-side Mute button only signifies that the server should stop acce

5.3
CVE-2020-27606

BigBlueButton before 2.2.28 (or earlier) does not set the secure flag for the session cookie in an https session, which

6.5
CVE-2020-27604

BigBlueButton before 2.3 does not implement LibreOffice sandboxing. This might make it easier for remote authenticated u

4.9
CVE-2020-14901

Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 19c.

5.4
CVE-2020-14900

Vulnerability in the Oracle Application Express Group Calendar component of Oracle Database Server. The supported versio

5.4
CVE-2020-14899

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version

5.4
CVE-2020-14898

Vulnerability in the Oracle Application Express Packaged Apps component of Oracle Database Server. The supported version

6.5
CVE-2020-14897

Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Lo

6.5
CVE-2020-14896

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppor

5.4
CVE-2020-14895

Vulnerability in the Oracle Utilities Framework product of Oracle Utilities Applications (component: System Wide). Suppo

6.5
CVE-2020-14894

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core

4.9
CVE-2020-14893

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

5.5
CVE-2020-14892

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

4.9
CVE-2020-14891

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

6.5
CVE-2020-14890

Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Lo

6.0
CVE-2020-14889

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

4.9
CVE-2020-14888

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

6.5
CVE-2020-14887

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Inf

6.0
CVE-2020-14886

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

6.0
CVE-2020-14885

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

6.0
CVE-2020-14884

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

6.0
CVE-2020-14881

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

6.5
CVE-2020-14877

Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component:

4.4
CVE-2020-14873

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affe

Test your stack for 2020issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.