2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4703 | HIGH | 8 | 1.8% | Sep 15, 2020 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload a... |
| CVE-2020-4521 | HIGH | 8.8 | 6.5% | Sep 15, 2020 | IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the... |
| CVE-2020-23451 | HIGH | 8.8 | 0.6% | Sep 15, 2020 | Spiceworks Version <= 7.5.00107 is affected by CSRF which can lead to privilege escalation via "/settings/v1/users" func... |
| CVE-2020-16101 | HIGH | 7.5 | 1.0% | Sep 15, 2020 | It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out... |
| CVE-2020-16100 | HIGH | 7.5 | 1.0% | Sep 15, 2020 | It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websoc... |
| CVE-2020-16096 | HIGH | 7.7 | 0.8% | Sep 15, 2020 | In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(... |
| CVE-2020-14345 | HIGH | 7.8 | 0.6% | Sep 15, 2020 | A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead... |
| CVE-2020-24925 | HIGH | 7.5 | 1.0% | Sep 15, 2020 | A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the pa... |
| CVE-2020-15590 | HIGH | 7.5 | 2.5% | Sep 14, 2020 | A vulnerability in the Private Internet Access (PIA) VPN Client for Linux 1.5 through 2.3+ allows remote attackers to by... |
| CVE-2020-13315 | HIGH | 7.5 | 2.1% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The profile activity page was not r... |
| CVE-2020-13309 | HIGH | 8.8 | 1.3% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SS... |
| CVE-2020-13306 | HIGH | 7.5 | 1.8% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abu... |
| CVE-2020-13304 | HIGH | 7.2 | 1.6% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Same 2 factor Authentication secret... |
| CVE-2020-13302 | HIGH | 7.2 | 1.1% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Under certain conditions GitLab was... |
| CVE-2020-11881 | HIGH | 7.5 | 4.3% | Sep 14, 2020 | An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated re... |
| CVE-2020-10229 | HIGH | 8.8 | 0.8% | Sep 14, 2020 | A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such a... |
| CVE-2020-10228 | HIGH | 8.8 | 2.9% | Sep 14, 2020 | A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, re... |
| CVE-2020-25574 | HIGH | 7.5 | 2.4% | Sep 14, 2020 | An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve() could resu... |
| CVE-2020-24457 | HIGH | 7.6 | 0.4% | Sep 14, 2020 | Logic error in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processors may allow an unauthenticated ... |
| CVE-2020-13318 | HIGH | 7.3 | 1.0% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration wa... |
| CVE-2020-13299 | HIGH | 8.1 | 1.2% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The revocation feature was not revo... |
| CVE-2020-0570 | HIGH | 7.3 | 0.6% | Sep 14, 2020 | Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potential... |
| CVE-2020-25379 | HIGH | 8.8 | 1.9% | Sep 14, 2020 | Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the 'Manufacturer[]' paramet... |
| CVE-2020-8817 | HIGH | 8.1 | 0.9% | Sep 14, 2020 | Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata. |
| CVE-2020-12789 | HIGH | 7.5 | 1.2% | Sep 14, 2020 | The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now