2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5936 | HIGH | 7.5 | 1.1% | Oct 29, 2020 | On BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic Management Microkernel... |
| CVE-2020-5933 | HIGH | 7.5 | 1.1% | Oct 29, 2020 | On versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, when a BIG-IP syste... |
| CVE-2020-5931 | HIGH | 7.5 | 1.0% | Oct 29, 2020 | On BIG-IP 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, Virtual servers with ... |
| CVE-2020-4724 | HIGH | 7.8 | 1.5% | Oct 29, 2020 | IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by ... |
| CVE-2020-4723 | HIGH | 7.8 | 1.5% | Oct 29, 2020 | IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by ... |
| CVE-2020-4722 | HIGH | 7.8 | 1.5% | Oct 29, 2020 | IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by ... |
| CVE-2020-4721 | HIGH | 7.8 | 1.5% | Oct 29, 2020 | IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by ... |
| CVE-2020-7384 | HIGH | 7.8 | 30.6% | Oct 29, 2020 | Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish ... |
| CVE-2020-5937 | HIGH | 7.5 | 1.3% | Oct 29, 2020 | On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel (TMM) may produce a core file while processing layer 4... |
| CVE-2020-27653 | HIGH | 8.3 | 0.8% | Oct 29, 2020 | Algorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-m... |
| CVE-2020-27652 | HIGH | 8.3 | 0.8% | Oct 29, 2020 | Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-... |
| CVE-2020-27651 | HIGH | 8.1 | 0.8% | Oct 29, 2020 | Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session cookie in an HTTPS session,... |
| CVE-2020-11616 | HIGH | 7.5 | 1.3% | Oct 29, 2020 | NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which... |
| CVE-2020-11615 | HIGH | 7.5 | 1.2% | Oct 29, 2020 | NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which... |
| CVE-2020-11489 | HIGH | 7.5 | 1.3% | Oct 29, 2020 | NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior... |
| CVE-2020-11487 | HIGH | 7.5 | 1.3% | Oct 29, 2020 | NVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30. DGX-2 with BMC firmware versions prior to 1.06.06... |
| CVE-2020-11485 | HIGH | 8.8 | 0.8% | Oct 29, 2020 | NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a Cross-Site Request Forgery (CSRF) ... |
| CVE-2020-27986 | HIGH | 7.5 | 16.2% | Oct 28, 2020 | SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settin... |
| CVE-2020-24713 | HIGH | 7.5 | 1.1% | Oct 28, 2020 | Gophish through 0.10.1 does not invalidate the gophish cookie upon logout. |
| CVE-2020-24707 | HIGH | 7.8 | 1.3% | Oct 28, 2020 | Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content. |
| CVE-2020-24990 | HIGH | 7.5 | 3.6% | Oct 28, 2020 | An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote ... |
| CVE-2020-26133 | HIGH | 7.8 | 0.3% | Oct 28, 2020 | An issue was discovered in Dual DHCP DNS Server 7.40. Due to insufficient access restrictions in the default installatio... |
| CVE-2020-26132 | HIGH | 7.8 | 0.3% | Oct 28, 2020 | An issue was discovered in Home DNS Server 0.10. Due to insufficient access restrictions in the default installation dir... |
| CVE-2020-26131 | HIGH | 7.8 | 0.4% | Oct 28, 2020 | Issues were discovered in Open DHCP Server (Regular) 1.75 and Open DHCP Server (LDAP Based) 0.1Beta. Due to insufficient... |
| CVE-2020-26130 | HIGH | 7.8 | 0.4% | Oct 28, 2020 | Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now