2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27016 | HIGH | 8.8 | 1.9% | Nov 9, 2020 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CS... |
| CVE-2020-28373 | HIGH | 8.8 | 1.0% | Nov 9, 2020 | upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overfl... |
| CVE-2020-4759 | HIGH | 7.8 | 2.0% | Nov 9, 2020 | IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute ... |
| CVE-2020-27977 | HIGH | 7.8 | 0.3% | Nov 9, 2020 | CapaSystems CapaInstaller before 6.0.101 does not properly assign, modify, or check privileges for an actor who attempts... |
| CVE-2020-23140 | HIGH | 8.1 | 1.0% | Nov 9, 2020 | Microweber 1.1.18 is affected by insufficient session expiration. When changing passwords, both sessions for when a user... |
| CVE-2020-14366 | HIGH | 7.5 | 1.4% | Nov 9, 2020 | A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible b... |
| CVE-2020-8268 | HIGH | 7.5 | 1.3% | Nov 9, 2020 | Prototype pollution vulnerability in json8-merge-patch npm package < 1.0.3 may allow attackers to inject or modify metho... |
| CVE-2020-24400 | HIGH | 7.1 | 2.3% | Nov 9, 2020 | Magento versions 2.4.0 and 2.3.5 (and earlier) are affected by an SQL Injection vulnerability that could lead to sensiti... |
| CVE-2020-7764 | HIGH | 7.5 | 1.7% | Nov 8, 2020 | This affects the package find-my-way before 2.2.5, from 3.0.0 and before 3.0.5. It accepts the Accept-Version' header by... |
| CVE-2020-28345 | HIGH | 7.5 | 0.4% | Nov 8, 2020 | An issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may crash because of the l... |
| CVE-2020-28344 | HIGH | 7.5 | 0.4% | Nov 8, 2020 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. System services may crash b... |
| CVE-2020-28343 | HIGH | 7.8 | 0.2% | Nov 8, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 980, 9820, and 9830 chipsets) software... |
| CVE-2020-28342 | HIGH | 7.8 | 0.3% | Nov 8, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (China / India) software. The S Secure applica... |
| CVE-2020-28341 | HIGH | 7.8 | 0.2% | Nov 8, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos990 chipsets) software. The S3K250AF Secure Elemen... |
| CVE-2020-28339 | HIGH | 8.8 | 1.9% | Nov 7, 2020 | The usc-e-shop (aka Collne Welcart e-Commerce) plugin before 1.9.36 for WordPress allows Object Injection because of usc... |
| CVE-2020-16122 | HIGH | 7.8 | 0.3% | Nov 7, 2020 | PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository tru... |
| CVE-2020-15259 | HIGH | 8.8 | 0.9% | Nov 6, 2020 | ad-ldap-connector's admin panel before version 5.0.13 does not provide csrf protection, which when exploited may result ... |
| CVE-2020-3604 | HIGH | 7.8 | 2.4% | Nov 6, 2020 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could al... |
| CVE-2020-3603 | HIGH | 7.8 | 2.5% | Nov 6, 2020 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could al... |
| CVE-2020-3600 | HIGH | 7.8 | 0.3% | Nov 6, 2020 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on t... |
| CVE-2020-3595 | HIGH | 7.8 | 0.3% | Nov 6, 2020 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root grou... |
| CVE-2020-3594 | HIGH | 7.8 | 0.3% | Nov 6, 2020 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on t... |
| CVE-2020-3593 | HIGH | 7.8 | 0.3% | Nov 6, 2020 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on t... |
| CVE-2020-3588 | HIGH | 7.8 | 0.4% | Nov 6, 2020 | A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local ... |
| CVE-2020-3574 | HIGH | 7.5 | 7.9% | Nov 6, 2020 | A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote att... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now