2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-24560 | HIGH | 7.5 | 1.8% | Sep 24, 2020 | An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family o... |
| CVE-2020-15604 | HIGH | 7.5 | 1.6% | Sep 24, 2020 | An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family o... |
| CVE-2020-25603 | HIGH | 7.8 | 0.4% | Sep 23, 2020 | An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event chan... |
| CVE-2020-25599 | HIGH | 7 | 0.3% | Sep 23, 2020 | An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potenti... |
| CVE-2020-25595 | HIGH | 7.8 | 0.4% | Sep 23, 2020 | An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen... |
| CVE-2020-11031 | HIGH | 7.5 | 0.3% | Sep 23, 2020 | In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on th... |
| CVE-2020-24213 | HIGH | 7.5 | 1.1% | Sep 23, 2020 | An integer overflow was discovered in YGOPro ygocore v13.51. Attackers can use it to leak the game server thread's memor... |
| CVE-2020-2284 | HIGH | 7.1 | 0.9% | Sep 23, 2020 | Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not configure its XML parser to prevent XML external entity (XXE)... |
| CVE-2020-2280 | HIGH | 8.8 | 1.1% | Sep 23, 2020 | A cross-site request forgery (CSRF) vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execu... |
| CVE-2020-16244 | HIGH | 7.2 | 0.7% | Sep 23, 2020 | GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible t... |
| CVE-2020-7122 | HIGH | 7.5 | 1.0% | Sep 23, 2020 | Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been ... |
| CVE-2020-7121 | HIGH | 7.5 | 1.0% | Sep 23, 2020 | Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been ... |
| CVE-2020-24625 | HIGH | 7.5 | 1.6% | Sep 23, 2020 | Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE P... |
| CVE-2020-24624 | HIGH | 7.5 | 1.6% | Sep 23, 2020 | Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE... |
| CVE-2020-14365 | HIGH | 7.1 | 0.2% | Sep 23, 2020 | A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, wh... |
| CVE-2020-10714 | HIGH | 7.5 | 1.5% | Sep 23, 2020 | A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with... |
| CVE-2020-25826 | HIGH | 7.8 | 0.4% | Sep 23, 2020 | PingID Integration for Windows Login before 2.4.2 allows local users to gain privileges by modifying CefSharp.BrowserSub... |
| CVE-2020-25821 | HIGH | 7.5 | 1.4% | Sep 23, 2020 | peg-markdown 0.4.14 has a NULL pointer dereference in process_raw_blocks in markdown_lib.c. NOTE: This vulnerability onl... |
| CVE-2020-3569 | HIGH | 8.6 | 3.3% | Sep 23, 2020 | Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software coul... |
| CVE-2020-3143 | HIGH | 7.2 | 8.5% | Sep 23, 2020 | A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software, Cisco TeleP... |
| CVE-2020-3135 | HIGH | 8.8 | 0.5% | Sep 23, 2020 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM) could allow an unaut... |
| CVE-2020-3133 | HIGH | 7.5 | 1.4% | Sep 23, 2020 | A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could a... |
| CVE-2020-25515 | HIGH | 7.8 | 0.5% | Sep 22, 2020 | Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books > New Book , http://<s... |
| CVE-2020-25514 | HIGH | 8.4 | 0.6% | Sep 22, 2020 | Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http://... |
| CVE-2020-14031 | HIGH | 7.2 | 1.6% | Sep 22, 2020 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be u... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now