2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27423 | HIGH | 7.5 | 6.4% | Nov 16, 2020 | Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial o... |
| CVE-2020-27191 | HIGH | 7.5 | 8.4% | Nov 16, 2020 | LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the ind... |
| CVE-2020-13769 | HIGH | 8.8 | 2.6% | Nov 16, 2020 | LDMS/alert_log.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device r... |
| CVE-2020-25209 | HIGH | 7.5 | 2.4% | Nov 16, 2020 | In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure ... |
| CVE-2020-25013 | HIGH | 7.5 | 1.4% | Nov 16, 2020 | JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler. |
| CVE-2020-8897 | HIGH | 8.1 | 0.4% | Nov 16, 2020 | A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2... |
| CVE-2020-5659 | HIGH | 8.8 | 1.1% | Nov 16, 2020 | SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary S... |
| CVE-2020-28649 | HIGH | 8.8 | 0.8% | Nov 16, 2020 | The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file... |
| CVE-2020-28648 | HIGH | 8.8 | 6.1% | Nov 16, 2020 | Improper input validation in the Auto-Discovery component of Nagios XI before 5.7.5 allows an authenticated attacker to ... |
| CVE-2020-8273 | HIGH | 8.8 | 2.4% | Nov 16, 2020 | Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8... |
| CVE-2020-8272 | HIGH | 7.5 | 1.5% | Nov 16, 2020 | Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1... |
| CVE-2020-8270 | HIGH | 8.8 | 3.3% | Nov 16, 2020 | An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD version... |
| CVE-2020-8269 | HIGH | 8.8 | 2.6% | Nov 16, 2020 | An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, ... |
| CVE-2020-8259 | HIGH | 8.1 | 0.7% | Nov 16, 2020 | Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the... |
| CVE-2020-5666 | HIGH | 7.5 | 8.4% | Nov 16, 2020 | Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '... |
| CVE-2020-2492 | HIGH | 7.2 | 1.7% | Nov 16, 2020 | If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue... |
| CVE-2020-2490 | HIGH | 7.2 | 2.2% | Nov 16, 2020 | If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue... |
| CVE-2020-25695 | HIGH | 8.8 | 46.4% | Nov 16, 2020 | A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9... |
| CVE-2020-25694 | HIGH | 8.1 | 1.6% | Nov 16, 2020 | A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9... |
| CVE-2020-28268 | HIGH | 7.5 | 3.4% | Nov 15, 2020 | Prototype pollution vulnerability in 'controlled-merge' versions 1.0.0 through 1.2.0 allows attacker to cause a denial o... |
| CVE-2020-15481 | HIGH | 7.8 | 0.6% | Nov 13, 2020 | An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 B... |
| CVE-2020-5796 | HIGH | 7.8 | 1.9% | Nov 13, 2020 | Improper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged, authenticated user to weaken the... |
| CVE-2020-27217 | HIGH | 7.5 | 1.3% | Nov 13, 2020 | In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received fro... |
| CVE-2020-12313 | HIGH | 8.8 | 0.9% | Nov 13, 2020 | Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an u... |
| CVE-2020-8583 | HIGH | 7.5 | 1.1% | Nov 13, 2020 | Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could a... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now