2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15255 | HIGH | 7.3 | 3.5% | Oct 16, 2020 | In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could... |
| CVE-2020-15252 | HIGH | 8.8 | 3.2% | Oct 16, 2020 | In XWiki before version 12.5 and 11.10.6, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to th... |
| CVE-2020-27178 | HIGH | 7.5 | 1.2% | Oct 16, 2020 | Apereo CAS 5.3.x before 5.3.16, 6.x before 6.1.7.2, 6.2.x before 6.2.4, and 6.3.x before 6.3.0-RC4 mishandles secret key... |
| CVE-2020-3991 | HIGH | 7.1 | 0.3% | Oct 16, 2020 | VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system acc... |
| CVE-2020-26682 | HIGH | 8.8 | 1.8% | Oct 16, 2020 | In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow. |
| CVE-2020-15867 | HIGH | 7.2 | 87.5% | Oct 16, 2020 | The git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remote code execution. There can be a privile... |
| CVE-2020-14144 | HIGH | 7.2 | 93.7% | Oct 16, 2020 | The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer envir... |
| CVE-2020-26893 | HIGH | 7.8 | 0.2% | Oct 16, 2020 | An issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed copy of ClamXAV 2 (runn... |
| CVE-2020-25829 | HIGH | 7.5 | 6.5% | Oct 16, 2020 | An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacke... |
| CVE-2020-27174 | HIGH | 7.5 | 1.7% | Oct 16, 2020 | In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage w... |
| CVE-2020-27173 | HIGH | 7.5 | 1.5% | Oct 16, 2020 | In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input so... |
| CVE-2020-7591 | HIGH | 8.8 | 1.5% | Oct 15, 2020 | A vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of the device could allow a... |
| CVE-2020-12503 | HIGH | 7.2 | 23.3% | Oct 15, 2020 | Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv... |
| CVE-2020-12502 | HIGH | 8.8 | 1.0% | Oct 15, 2020 | Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv... |
| CVE-2020-25858 | HIGH | 7.5 | 9.6% | Oct 15, 2020 | The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not val... |
| CVE-2020-11637 | HIGH | 7.5 | 1.1% | Oct 15, 2020 | A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and ... |
| CVE-2020-6108 | HIGH | 7.8 | 2.1% | Oct 15, 2020 | An exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools F2fs.Fsck 1.1... |
| CVE-2020-6105 | HIGH | 7.8 | 2.0% | Oct 15, 2020 | An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A... |
| CVE-2020-7334 | HIGH | 8.2 | 0.3% | Oct 15, 2020 | Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2... |
| CVE-2020-27157 | HIGH | 8.1 | 1.0% | Oct 15, 2020 | Veritas APTARE versions prior to 10.5 included code that bypassed the normal login process when specific authentication ... |
| CVE-2020-5642 | HIGH | 8.8 | 0.8% | Oct 15, 2020 | Cross-site request forgery (CSRF) vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote atta... |
| CVE-2020-27153 | HIGH | 8.6 | 4.1% | Oct 15, 2020 | In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attack... |
| CVE-2020-6374 | HIGH | 7.8 | 1.2% | Oct 15, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation(.jt) file received ... |
| CVE-2020-6373 | HIGH | 7.8 | 1.2% | Oct 15, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources... |
| CVE-2020-6372 | HIGH | 7.8 | 1.2% | Oct 15, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now