2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-2286 | HIGH | 8.8 | 1.3% | Oct 8, 2020 | Jenkins Role-based Authorization Strategy Plugin 3.0 and earlier does not properly invalidate a permission cache when th... |
| CVE-2020-25263 | HIGH | 7.1 | 0.6% | Oct 8, 2020 | PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI:... |
| CVE-2020-3596 | HIGH | 7.5 | 1.2% | Oct 8, 2020 | A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communi... |
| CVE-2020-3544 | HIGH | 8.8 | 0.7% | Oct 8, 2020 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could... |
| CVE-2020-3535 | HIGH | 8.4 | 0.6% | Oct 8, 2020 | A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an aut... |
| CVE-2020-3467 | HIGH | 7.7 | 0.9% | Oct 8, 2020 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat... |
| CVE-2020-7316 | HIGH | 7.8 | 0.4% | Oct 7, 2020 | Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0 allows local user... |
| CVE-2020-15176 | HIGH | 8.6 | 1.1% | Oct 7, 2020 | In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does no... |
| CVE-2020-26880 | HIGH | 7.8 | 0.3% | Oct 7, 2020 | Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifying... |
| CVE-2020-26876 | HIGH | 7.5 | 9.2% | Oct 7, 2020 | The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step (for cour... |
| CVE-2020-26596 | HIGH | 8.8 | 5.4% | Oct 7, 2020 | The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to exe... |
| CVE-2020-24246 | HIGH | 7.5 | 1.3% | Oct 7, 2020 | Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php... |
| CVE-2020-13334 | HIGH | 7.5 | 1.5% | Oct 7, 2020 | In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/gr... |
| CVE-2020-25985 | HIGH | 8.1 | 1.7% | Oct 7, 2020 | MonoCMS Blog 1.0 is affected by: Arbitrary File Deletion. Any authenticated user can delete files on and off the webserv... |
| CVE-2020-7742 | HIGH | 7.5 | 1.5% | Oct 7, 2020 | This affects the package simpl-schema before 1.10.2. |
| CVE-2020-26606 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. An attacker can ac... |
| CVE-2020-26605 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Exynos chipsets) software. They allow attack... |
| CVE-2020-26604 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered in SystemUI on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Pendin... |
| CVE-2020-26602 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered in EthernetNetwork on Samsung mobile devices with O(8.1), P(9.0), Q(10.0), and R(11.0) software.... |
| CVE-2020-26601 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered in DirEncryptService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Pendin... |
| CVE-2020-26600 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Auto Hotspot allows attackers to obtain sensiti... |
| CVE-2020-26598 | HIGH | 7.5 | 0.3% | Oct 6, 2020 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, and 9.0 software. The Network Management componen... |
| CVE-2020-26597 | HIGH | 7.5 | 0.4% | Oct 6, 2020 | An issue was discovered on LG mobile devices with Android OS 9.0 and 10 software. The Wi-Fi subsystem has incorrect inpu... |
| CVE-2020-16267 | HIGH | 8.8 | 43.3% | Oct 6, 2020 | Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp r... |
| CVE-2020-15927 | HIGH | 8.8 | 40.3% | Oct 6, 2020 | Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp r... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now