2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10140 | HIGH | 7.3 | 0.4% | Oct 21, 2020 | Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged proc... |
| CVE-2020-10139 | HIGH | 7.8 | 0.4% | Oct 21, 2020 | Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\... |
| CVE-2020-10138 | HIGH | 7.8 | 0.5% | Oct 21, 2020 | Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a s... |
| CVE-2020-26896 | HIGH | 8.2 | 0.7% | Oct 21, 2020 | Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chai... |
| CVE-2020-5792 | HIGH | 7.2 | 61.0% | Oct 20, 2020 | Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user... |
| CVE-2020-5791 | HIGH | 7.2 | 78.6% | Oct 20, 2020 | Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admi... |
| CVE-2020-25648 | HIGH | 7.5 | 3.9% | Oct 20, 2020 | A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker t... |
| CVE-2020-25157 | HIGH | 7.5 | 1.4% | Oct 20, 2020 | The R-SeeNet webpage (1.5.1 through 2.4.10) suffers from SQL injection, which allows a remote attacker to invoke queries... |
| CVE-2020-24415 | HIGH | 7.8 | 2.6% | Oct 20, 2020 | Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing... |
| CVE-2020-24414 | HIGH | 7.8 | 2.7% | Oct 20, 2020 | Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing... |
| CVE-2020-24413 | HIGH | 7.8 | 2.7% | Oct 20, 2020 | Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing... |
| CVE-2020-24412 | HIGH | 7.8 | 2.7% | Oct 20, 2020 | Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing... |
| CVE-2020-24411 | HIGH | 7.8 | 4.1% | Oct 20, 2020 | Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds write vulnerability when handling crafted P... |
| CVE-2020-24410 | HIGH | 7.8 | 4.7% | Oct 20, 2020 | Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing crafted PDF... |
| CVE-2020-24409 | HIGH | 7.8 | 4.7% | Oct 20, 2020 | Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing crafted PDF... |
| CVE-2020-9417 | HIGH | 8.8 | 0.9% | Oct 20, 2020 | The Transaction Insight reporting component of TIBCO Software Inc.'s TIBCO Foresight Archive and Retrieval System, TIBCO... |
| CVE-2020-15264 | HIGH | 7.8 | 1.5% | Oct 20, 2020 | The Boxstarter installer before version 2.13.0 configures C:\ProgramData\Boxstarter to be in the system-wide PATH enviro... |
| CVE-2020-24765 | HIGH | 7.5 | 6.8% | Oct 20, 2020 | InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a... |
| CVE-2020-15931 | HIGH | 7.5 | 3.7% | Oct 20, 2020 | Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challeng... |
| CVE-2020-3994 | HIGH | 7.4 | 0.6% | Oct 20, 2020 | VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter Serve... |
| CVE-2020-3982 | HIGH | 7.7 | 0.8% | Oct 20, 2020 | VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Work... |
| CVE-2020-7749 | HIGH | 7.6 | 1.6% | Oct 20, 2020 | This affects all versions of package osm-static-maps. User input given to the package is passed directly to a template w... |
| CVE-2020-7748 | HIGH | 8.1 | 1.7% | Oct 20, 2020 | This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used a... |
| CVE-2020-6085 | HIGH | 7.5 | 3.5% | Oct 19, 2020 | An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Br... |
| CVE-2020-6084 | HIGH | 7.5 | 3.5% | Oct 19, 2020 | An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Br... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now