2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27187 | HIGH | 7.8 | 0.4% | Oct 26, 2020 | An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcore_externalcommand helper contains a logic... |
| CVE-2020-7125 | HIGH | 8.8 | 1.4% | Oct 26, 2020 | A remote escalation of privilege vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
| CVE-2020-24632 | HIGH | 7.2 | 2.6% | Oct 26, 2020 | A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.... |
| CVE-2020-24631 | HIGH | 7.2 | 2.6% | Oct 26, 2020 | A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3... |
| CVE-2020-15897 | HIGH | 7.5 | 1.3% | Oct 26, 2020 | Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attack... |
| CVE-2020-13100 | HIGH | 7.5 | 1.3% | Oct 26, 2020 | Arista’s CloudVision eXchange (CVX) server before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x bef... |
| CVE-2020-7751 | HIGH | 7.2 | 1.5% | Oct 26, 2020 | pathval before version 1.1.1 is vulnerable to prototype pollution. |
| CVE-2020-24848 | HIGH | 7.8 | 0.4% | Oct 23, 2020 | FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform ... |
| CVE-2020-5990 | HIGH | 7.8 | 0.4% | Oct 23, 2020 | NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the ShadowPlay component which m... |
| CVE-2020-5978 | HIGH | 7.8 | 0.3% | Oct 23, 2020 | NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder i... |
| CVE-2020-5977 | HIGH | 7.8 | 0.4% | Oct 23, 2020 | NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Ser... |
| CVE-2020-27216 | HIGH | 7 | 4.3% | Oct 23, 2020 | In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta... |
| CVE-2020-26561 | HIGH | 8.8 | 12.2% | Oct 23, 2020 | Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow vulnerability because of sprin... |
| CVE-2020-9331 | HIGH | 7.8 | 0.4% | Oct 23, 2020 | CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with the SeChang... |
| CVE-2020-26887 | HIGH | 7.8 | 1.4% | Oct 23, 2020 | FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism. |
| CVE-2020-27672 | HIGH | 7 | 0.3% | Oct 22, 2020 | An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve ... |
| CVE-2020-27671 | HIGH | 7.8 | 0.3% | Oct 22, 2020 | An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data... |
| CVE-2020-27670 | HIGH | 7.8 | 0.3% | Oct 22, 2020 | An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption)... |
| CVE-2020-25186 | HIGH | 7.5 | 1.1% | Oct 22, 2020 | An XXE vulnerability exists within LeviStudioU Release Build 2019-09-21 and prior when processing parameter entities, wh... |
| CVE-2020-18129 | HIGH | 8.8 | 0.6% | Oct 22, 2020 | A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php. |
| CVE-2020-15681 | HIGH | 7.5 | 1.1% | Oct 22, 2020 | When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could ha... |
| CVE-2020-13327 | HIGH | 7.5 | 0.7% | Oct 22, 2020 | An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions st... |
| CVE-2020-11853 | HIGH | 8.8 | 77.0% | Oct 22, 2020 | Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting v... |
| CVE-2020-10721 | HIGH | 7.8 | 0.6% | Oct 22, 2020 | A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configurati... |
| CVE-2020-9994 | HIGH | 7.1 | 0.9% | Oct 22, 2020 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Cat... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now