2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28331 | HIGH | 7.5 | 1.7% | Nov 24, 2020 | Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-... |
| CVE-2020-13620 | HIGH | 8.8 | 0.5% | Nov 24, 2020 | Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading ... |
| CVE-2020-29040 | HIGH | 8.8 | 0.4% | Nov 24, 2020 | An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corrup... |
| CVE-2020-4002 | HIGH | 7.2 | 1.6% | Nov 24, 2020 | The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 handles system parameter... |
| CVE-2020-4000 | HIGH | 8.8 | 43.0% | Nov 24, 2020 | The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing fil... |
| CVE-2020-3985 | HIGH | 8.8 | 1.4% | Nov 24, 2020 | The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 allows an access to set arbitrary authorization... |
| CVE-2020-5674 | HIGH | 7.8 | 0.3% | Nov 24, 2020 | Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privil... |
| CVE-2020-26890 | HIGH | 7.5 | 3.0% | Nov 24, 2020 | Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.ro... |
| CVE-2020-25696 | HIGH | 7.5 | 2.6% | Nov 23, 2020 | A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, befo... |
| CVE-2020-25660 | HIGH | 8.8 | 1.0% | Nov 23, 2020 | A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not ve... |
| CVE-2020-26228 | HIGH | 7.5 | 0.7% | Nov 23, 2020 | TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 user sessio... |
| CVE-2020-24227 | HIGH | 7.5 | 1.4% | Nov 23, 2020 | Playground Sessions v2.5.582 (and earlier) for Windows, stores the user credentials in plain text allowing anyone with a... |
| CVE-2020-15246 | HIGH | 7.5 | 1.7% | Nov 23, 2020 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version... |
| CVE-2020-12351 | HIGH | 8.8 | 7.7% | Nov 23, 2020 | Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via a... |
| CVE-2020-7777 | HIGH | 7.2 | 2.0% | Nov 23, 2020 | This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript... |
| CVE-2020-28421 | HIGH | 7.8 | 0.3% | Nov 23, 2020 | CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that ... |
| CVE-2020-7925 | HIGH | 7.5 | 1.7% | Nov 23, 2020 | Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthent... |
| CVE-2020-27985 | HIGH | 7.8 | 0.5% | Nov 23, 2020 | Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain ro... |
| CVE-2020-28975 | HIGH | 7.5 | 3.4% | Nov 21, 2020 | svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cau... |
| CVE-2020-14258 | HIGH | 7.5 | 1.2% | Nov 21, 2020 | HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A re... |
| CVE-2020-14234 | HIGH | 7.5 | 1.0% | Nov 21, 2020 | HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potent... |
| CVE-2020-14230 | HIGH | 7.5 | 1.2% | Nov 21, 2020 | HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A r... |
| CVE-2020-25185 | HIGH | 8.8 | 2.1% | Nov 21, 2020 | The affected product is vulnerable to five post-authentication buffer overflows, which may allow a logged in user to rem... |
| CVE-2020-4005 | HIGH | 7.8 | 0.4% | Nov 20, 2020 | VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a... |
| CVE-2020-4004 | HIGH | 8.2 | 0.4% | Nov 20, 2020 | VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstati... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now