2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-17412 | HIGH | 7.8 | 4.0% | Oct 13, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.... |
| CVE-2020-17410 | HIGH | 7.8 | 8.6% | Oct 13, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.... |
| CVE-2020-17406 | HIGH | 8.8 | 5.1% | Oct 13, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE p... |
| CVE-2020-7743 | HIGH | 7.3 | 3.9% | Oct 13, 2020 | The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configu... |
| CVE-2020-15012 | HIGH | 8.6 | 2.6% | Oct 12, 2020 | A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests... |
| CVE-2020-26546 | HIGH | 7.5 | 1.3% | Oct 12, 2020 | An issue was discovered in HelpDeskZ 1.0.2. The feature to auto-login a user, via the RememberMe functionality, is prone... |
| CVE-2020-25825 | HIGH | 7.5 | 1.5% | Oct 12, 2020 | In Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in the task logs. |
| CVE-2020-9123 | HIGH | 7.8 | 0.8% | Oct 12, 2020 | HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) and versions earlier than 10.1.0.160(C01E160R2P8) have a bu... |
| CVE-2020-9090 | HIGH | 7.8 | 0.2% | Oct 12, 2020 | FusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege... |
| CVE-2020-7811 | HIGH | 7.8 | 0.7% | Oct 12, 2020 | Samsung Update 3.0.2.0 ~ 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker a... |
| CVE-2020-4388 | HIGH | 8.2 | 1.2% | Oct 12, 2020 | IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a... |
| CVE-2020-4302 | HIGH | 7.8 | 1.7% | Oct 12, 2020 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CS... |
| CVE-2020-26869 | HIGH | 7.5 | 1.7% | Oct 12, 2020 | ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to ac... |
| CVE-2020-26868 | HIGH | 7.5 | 2.1% | Oct 12, 2020 | ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an una... |
| CVE-2020-4779 | HIGH | 8.1 | 1.1% | Oct 12, 2020 | A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specia... |
| CVE-2020-4778 | HIGH | 7.5 | 0.8% | Oct 12, 2020 | IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which les... |
| CVE-2020-4776 | HIGH | 7.5 | 2.0% | Oct 12, 2020 | A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remo... |
| CVE-2020-4772 | HIGH | 8.1 | 1.4% | Oct 12, 2020 | An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A ... |
| CVE-2020-5140 | HIGH | 7.5 | 1.7% | Oct 12, 2020 | A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSL... |
| CVE-2020-5139 | HIGH | 7.5 | 1.7% | Oct 12, 2020 | A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due ... |
| CVE-2020-5138 | HIGH | 7.5 | 1.7% | Oct 12, 2020 | A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) o... |
| CVE-2020-5137 | HIGH | 7.5 | 1.7% | Oct 12, 2020 | A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on ... |
| CVE-2020-5133 | HIGH | 7.5 | 1.7% | Oct 12, 2020 | A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, w... |
| CVE-2020-26947 | HIGH | 7.8 | 0.4% | Oct 10, 2020 | monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH (with a preference ahead o... |
| CVE-2020-26945 | HIGH | 8.1 | 1.8% | Oct 10, 2020 | MyBatis before 3.5.6 mishandles deserialization of object streams. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now