2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25966 | HIGH | 7.5 | 1.4% | Oct 28, 2020 | Sectona Spectra before 3.4.0 has a vulnerable SOAP API endpoint that leaks sensitive information about the configured as... |
| CVE-2020-16262 | HIGH | 7.8 | 0.4% | Oct 28, 2020 | Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation. |
| CVE-2020-16260 | HIGH | 7.5 | 0.9% | Oct 28, 2020 | Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with othe... |
| CVE-2020-16258 | HIGH | 7.1 | 0.4% | Oct 28, 2020 | Winston 1.5.4 devices make use of a Monit service (not managed during the normal user process) which is configured with ... |
| CVE-2020-16256 | HIGH | 8.8 | 0.7% | Oct 28, 2020 | The API on Winston 1.5.4 devices is vulnerable to CSRF. |
| CVE-2020-4767 | HIGH | 7.5 | 1.6% | Oct 28, 2020 | IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial... |
| CVE-2020-15278 | HIGH | 7.5 | 1.1% | Oct 28, 2020 | Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in the Mod module. This exploit al... |
| CVE-2020-27978 | HIGH | 7.5 | 1.8% | Oct 28, 2020 | Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. A remote unauthenticated attacker can cause ... |
| CVE-2020-27975 | HIGH | 8.8 | 0.6% | Oct 28, 2020 | osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF. |
| CVE-2020-22552 | HIGH | 7.5 | 2.0% | Oct 28, 2020 | The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-un... |
| CVE-2020-8260 | HIGH | 7.2 | 96.5% | Oct 28, 2020 | A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform... |
| CVE-2020-8254 | HIGH | 8.8 | 2.0% | Oct 28, 2020 | A vulnerability in the Pulse Secure Desktop Client < 9.1R9 has Remote Code Execution (RCE) if users can be convinced to ... |
| CVE-2020-8250 | HIGH | 7.8 | 0.5% | Oct 28, 2020 | A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege. |
| CVE-2020-8249 | HIGH | 7.8 | 0.5% | Oct 28, 2020 | A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to perform buffer overflo... |
| CVE-2020-8248 | HIGH | 7.8 | 0.5% | Oct 28, 2020 | A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege. |
| CVE-2020-8241 | HIGH | 7.5 | 1.7% | Oct 28, 2020 | A vulnerability in the Pulse Secure Desktop Client < 9.1R9 could allow the attacker to perform a MITM Attack if end user... |
| CVE-2020-8240 | HIGH | 7.8 | 0.3% | Oct 28, 2020 | A vulnerability in the Pulse Secure Desktop Client < 9.1R9 allows a restricted user on an endpoint machine can use syste... |
| CVE-2020-5145 | HIGH | 8.6 | 1.2% | Oct 28, 2020 | SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerabili... |
| CVE-2020-5144 | HIGH | 7.8 | 0.6% | Oct 28, 2020 | SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SY... |
| CVE-2020-9973 | HIGH | 7.8 | 1.9% | Oct 27, 2020 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.7, Securi... |
| CVE-2020-9961 | HIGH | 7.8 | 1.5% | Oct 27, 2020 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.7, Secur... |
| CVE-2020-9941 | HIGH | 7.5 | 2.5% | Oct 27, 2020 | This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 H... |
| CVE-2020-9932 | HIGH | 8.8 | 1.1% | Oct 27, 2020 | A memory corruption issue was addressed with improved validation. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPa... |
| CVE-2020-9782 | HIGH | 7.5 | 1.2% | Oct 27, 2020 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m... |
| CVE-2020-9774 | HIGH | 7.5 | 0.6% | Oct 27, 2020 | An issue existed with Siri Suggestions access to encrypted data. The issue was fixed by limiting access to encrypted dat... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now