2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15235 | HIGH | 7.5 | 1.0% | Oct 5, 2020 | In RACTF before commit f3dc89b, unauthenticated users are able to get the value of sensitive config keys that would norm... |
| CVE-2020-26048 | HIGH | 8.8 | 1.8% | Oct 5, 2020 | The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within... |
| CVE-2020-15236 | HIGH | 7.5 | 1.7% | Oct 5, 2020 | In Wiki.js before version 2.5.151, directory traversal outside of Wiki.js context is possible when a storage module with... |
| CVE-2020-8182 | HIGH | 8 | 1.0% | Oct 5, 2020 | Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permiss... |
| CVE-2020-26061 | HIGH | 7.5 | 4.5% | Oct 5, 2020 | ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerabili... |
| CVE-2020-12302 | HIGH | 7.8 | 0.3% | Oct 5, 2020 | Improper permissions in the Intel(R) Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user... |
| CVE-2020-25636 | HIGH | 7.1 | 0.3% | Oct 5, 2020 | A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file t... |
| CVE-2020-7709 | HIGH | 7.2 | 1.8% | Oct 5, 2020 | This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported. |
| CVE-2020-25776 | HIGH | 7.8 | 0.6% | Oct 2, 2020 | Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege escalation attack where an atta... |
| CVE-2020-5988 | HIGH | 7.1 | 0.3% | Oct 2, 2020 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, wh... |
| CVE-2020-5987 | HIGH | 7.8 | 0.3% | Oct 2, 2020 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied parameters remain writabl... |
| CVE-2020-5985 | HIGH | 7.1 | 0.3% | Oct 2, 2020 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, ... |
| CVE-2020-5984 | HIGH | 7.8 | 0.4% | Oct 2, 2020 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it may have the use-after-free vulnerabi... |
| CVE-2020-5983 | HIGH | 7.1 | 0.3% | Oct 2, 2020 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin and the host driver kernel module, in which the p... |
| CVE-2020-24397 | HIGH | 7.2 | 26.8% | Oct 2, 2020 | An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled se... |
| CVE-2020-15589 | HIGH | 8.1 | 7.9% | Oct 2, 2020 | A design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the... |
| CVE-2020-5981 | HIGH | 7.8 | 0.3% | Oct 2, 2020 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.... |
| CVE-2020-5980 | HIGH | 7.8 | 0.4% | Oct 2, 2020 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in multiple components in which a securely loa... |
| CVE-2020-5979 | HIGH | 7.8 | 0.3% | Oct 2, 2020 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which... |
| CVE-2020-24628 | HIGH | 8.8 | 1.3% | Oct 2, 2020 | A remote code injection vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.... |
| CVE-2020-24356 | HIGH | 7.8 | 0.3% | Oct 2, 2020 | `cloudflared` versions prior to 2020.8.1 contain a local privilege escalation vulnerability on Windows systems. When run... |
| CVE-2020-18184 | HIGH | 7.2 | 1.4% | Oct 2, 2020 | In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote attackers to execute arb... |
| CVE-2020-25623 | HIGH | 7.5 | 3.1% | Oct 2, 2020 | Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker can send a crafted HTTP r... |
| CVE-2020-8110 | HIGH | 7.5 | 0.9% | Oct 2, 2020 | A vulnerability has been discovered in the ceva_emu.cvd module that results from a lack of proper validation of user-sup... |
| CVE-2020-7738 | HIGH | 8.3 | 1.5% | Oct 2, 2020 | All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load()... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now