2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26124 | HIGH | 8.8 | 67.2% | Oct 2, 2020 | openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield PO... |
| CVE-2020-24697 | HIGH | 7.5 | 4.4% | Oct 2, 2020 | An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, u... |
| CVE-2020-24696 | HIGH | 8.1 | 1.3% | Oct 2, 2020 | An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, u... |
| CVE-2020-17382 | HIGH | 7.8 | 2.1% | Oct 2, 2020 | The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054). |
| CVE-2020-14293 | HIGH | 7.5 | 5.3% | Oct 2, 2020 | conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacter... |
| CVE-2020-12127 | HIGH | 7.5 | 6.4% | Oct 2, 2020 | An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030... |
| CVE-2020-12123 | HIGH | 8.1 | 0.4% | Oct 2, 2020 | CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely ... |
| CVE-2020-26540 | HIGH | 7.5 | 0.7% | Oct 2, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mech... |
| CVE-2020-26538 | HIGH | 7.8 | 0.5% | Oct 2, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a ... |
| CVE-2020-26511 | HIGH | 7.5 | 2.1% | Oct 2, 2020 | The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This lead... |
| CVE-2020-9491 | HIGH | 7.5 | 2.8% | Oct 1, 2020 | In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connectio... |
| CVE-2020-9487 | HIGH | 7.5 | 3.0% | Oct 1, 2020 | In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did no... |
| CVE-2020-9486 | HIGH | 7.5 | 3.4% | Oct 1, 2020 | In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive proper... |
| CVE-2020-5786 | HIGH | 8.8 | 8.8% | Oct 1, 2020 | Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a remote attacker to perform sensitive applica... |
| CVE-2020-11979 | HIGH | 7.5 | 8.0% | Oct 1, 2020 | As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the... |
| CVE-2020-15678 | HIGH | 8.8 | 1.9% | Oct 1, 2020 | When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential u... |
| CVE-2020-15675 | HIGH | 8.8 | 1.0% | Oct 1, 2020 | When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially ex... |
| CVE-2020-15674 | HIGH | 8.8 | 0.8% | Oct 1, 2020 | Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corru... |
| CVE-2020-15673 | HIGH | 8.8 | 1.9% | Oct 1, 2020 | Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evi... |
| CVE-2020-15670 | HIGH | 8.8 | 1.1% | Oct 1, 2020 | Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of ... |
| CVE-2020-15669 | HIGH | 8.8 | 1.1% | Oct 1, 2020 | When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. T... |
| CVE-2020-15667 | HIGH | 8.8 | 1.6% | Oct 1, 2020 | When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap... |
| CVE-2020-15663 | HIGH | 8.8 | 2.6% | Oct 1, 2020 | If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the... |
| CVE-2020-25018 | HIGH | 7.5 | 1.1% | Oct 1, 2020 | Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization. |
| CVE-2020-25017 | HIGH | 8.3 | 1.3% | Oct 1, 2020 | Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now