2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14306 | HIGH | 8.8 | 1.3% | Sep 16, 2020 | An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions thr... |
| CVE-2020-7532 | HIGH | 7.8 | 1.4% | Sep 16, 2020 | A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and pri... |
| CVE-2020-7531 | HIGH | 7.8 | 0.8% | Sep 16, 2020 | A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allow... |
| CVE-2020-7530 | HIGH | 8.8 | 1.2% | Sep 16, 2020 | A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows... |
| CVE-2020-7528 | HIGH | 7.8 | 1.4% | Sep 16, 2020 | A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) w... |
| CVE-2020-4409 | HIGH | 8.2 | 0.9% | Sep 16, 2020 | IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbin... |
| CVE-2020-1748 | HIGH | 7.5 | 1.4% | Sep 16, 2020 | A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityMan... |
| CVE-2020-10758 | HIGH | 7.5 | 2.2% | Sep 16, 2020 | A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneous... |
| CVE-2020-24889 | HIGH | 7.8 | 1.4% | Sep 16, 2020 | A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp ... |
| CVE-2020-14382 | HIGH | 7.8 | 1.2% | Sep 16, 2020 | A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, tha... |
| CVE-2020-10733 | HIGH | 7.3 | 0.5% | Sep 16, 2020 | The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths... |
| CVE-2020-7733 | HIGH | 7.5 | 4.5% | Sep 16, 2020 | The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for ... |
| CVE-2020-2276 | HIGH | 8.8 | 1.6% | Sep 16, 2020 | Jenkins Selection tasks Plugin 1.0 and earlier executes a user-specified program on the Jenkins controller, allowing att... |
| CVE-2020-2268 | HIGH | 8.8 | 0.7% | Sep 16, 2020 | A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain acc... |
| CVE-2020-2261 | HIGH | 8.8 | 1.4% | Sep 16, 2020 | Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Confi... |
| CVE-2020-14393 | HIGH | 7.1 | 0.6% | Sep 16, 2020 | A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 3... |
| CVE-2020-25559 | HIGH | 7.8 | 1.6% | Sep 16, 2020 | gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary c... |
| CVE-2020-14386 | HIGH | 7.8 | 1.3% | Sep 16, 2020 | A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unp... |
| CVE-2020-25453 | HIGH | 8.8 | 6.3% | Sep 15, 2020 | An issue was discovered in BlackCat CMS before 1.4. There is a CSRF vulnerability (bypass csrf_token) that allows remote... |
| CVE-2020-11977 | HIGH | 7.2 | 2.8% | Sep 15, 2020 | In Apache Syncope 2.1.X releases prior to 2.1.7, when the Flowable extension is enabled, an administrator with workflow ... |
| CVE-2020-15172 | HIGH | 8.8 | 1.8% | Sep 15, 2020 | The Act module for Red Discord Bot before commit 6b9f3b86 is vulnerable to Remote Code Execution. With this exploit, Dis... |
| CVE-2020-14362 | HIGH | 7.8 | 0.6% | Sep 15, 2020 | A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may... |
| CVE-2020-14361 | HIGH | 7.8 | 0.6% | Sep 15, 2020 | A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may... |
| CVE-2020-14346 | HIGH | 7.8 | 0.6% | Sep 15, 2020 | A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in th... |
| CVE-2020-8342 | HIGH | 7 | 0.2% | Sep 15, 2020 | A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalati... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now