2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27697 | HIGH | 7.8 | 0.6% | Nov 18, 2020 | Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin... |
| CVE-2020-27696 | HIGH | 7.8 | 0.5% | Nov 18, 2020 | Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin... |
| CVE-2020-27695 | HIGH | 7.8 | 0.5% | Nov 18, 2020 | Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin... |
| CVE-2020-3392 | HIGH | 7.5 | 1.5% | Nov 18, 2020 | A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to ... |
| CVE-2020-3367 | HIGH | 7.8 | 0.8% | Nov 18, 2020 | A vulnerability in the log subscription subsystem of Cisco AsyncOS for the Cisco Secure Web Appliance (formerly Web Secu... |
| CVE-2020-26076 | HIGH | 7.5 | 1.3% | Nov 18, 2020 | A vulnerability in Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensit... |
| CVE-2020-26075 | HIGH | 8.8 | 1.6% | Nov 18, 2020 | A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker ... |
| CVE-2020-26072 | HIGH | 8.7 | 1.0% | Nov 18, 2020 | A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker ... |
| CVE-2020-28367 | HIGH | 7.5 | 2.4% | Nov 18, 2020 | Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time ... |
| CVE-2020-28366 | HIGH | 7.5 | 2.2% | Nov 18, 2020 | Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time ... |
| CVE-2020-28362 | HIGH | 7.5 | 3.8% | Nov 18, 2020 | Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. |
| CVE-2020-28091 | HIGH | 7.5 | 3.8% | Nov 18, 2020 | cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parame... |
| CVE-2020-25406 | HIGH | 7.3 | 0.9% | Nov 18, 2020 | app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files. |
| CVE-2020-24297 | HIGH | 8.8 | 3.6% | Nov 18, 2020 | httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS com... |
| CVE-2020-7564 | HIGH | 8.8 | 1.1% | Nov 18, 2020 | A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server... |
| CVE-2020-7563 | HIGH | 8.8 | 1.1% | Nov 18, 2020 | A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premi... |
| CVE-2020-7562 | HIGH | 8.1 | 0.9% | Nov 18, 2020 | A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premiu... |
| CVE-2020-28914 | HIGH | 7.1 | 0.4% | Nov 17, 2020 | An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath vol... |
| CVE-2020-26552 | HIGH | 7.5 | 1.2% | Nov 17, 2020 | An issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that implement API endpoints... |
| CVE-2020-26551 | HIGH | 7.5 | 0.9% | Nov 17, 2020 | An issue was discovered in Aviatrix Controller before R5.3.1151. Encrypted key values are stored in a readable file. |
| CVE-2020-26550 | HIGH | 7.5 | 1.5% | Nov 17, 2020 | An issue was discovered in Aviatrix Controller before R5.3.1151. An encrypted file containing credentials to unrelated s... |
| CVE-2020-26549 | HIGH | 7.5 | 1.5% | Nov 17, 2020 | An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection mechanism to prevent requests t... |
| CVE-2020-26548 | HIGH | 8.8 | 1.4% | Nov 17, 2020 | An issue was discovered in Aviatrix Controller before R5.4.1290. There is an insecure sudo rule: a user exists that can ... |
| CVE-2020-28136 | HIGH | 8.8 | 2.9% | Nov 17, 2020 | An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote... |
| CVE-2020-26405 | HIGH | 7.1 | 1.4% | Nov 17, 2020 | Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to sa... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now