2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7311 | HIGH | 7 | 0.3% | Sep 10, 2020 | Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users t... |
| CVE-2020-24552 | HIGH | 7.2 | 1.4% | Sep 10, 2020 | Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation,... |
| CVE-2020-25220 | HIGH | 7.8 | 0.4% | Sep 10, 2020 | The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because s... |
| CVE-2020-25219 | HIGH | 7.5 | 4.3% | Sep 9, 2020 | url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion ... |
| CVE-2020-1913 | HIGH | 8.1 | 1.2% | Sep 9, 2020 | An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c0... |
| CVE-2020-1912 | HIGH | 8.1 | 1.8% | Sep 9, 2020 | An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes pr... |
| CVE-2020-15789 | HIGH | 8.1 | 0.5% | Sep 9, 2020 | A vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cro... |
| CVE-2020-10056 | HIGH | 7.8 | 0.4% | Sep 9, 2020 | A vulnerability has been identified in License Management Utility (LMU) (All versions < V2.4). The lmgrd service of the ... |
| CVE-2020-10051 | HIGH | 7.8 | 0.3% | Sep 9, 2020 | A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). Multiple services of the ... |
| CVE-2020-10050 | HIGH | 7.8 | 0.3% | Sep 9, 2020 | A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The directory of service ... |
| CVE-2020-10049 | HIGH | 7.3 | 0.3% | Sep 9, 2020 | A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The start-stop scripts fo... |
| CVE-2020-15163 | HIGH | 8.2 | 0.6% | Sep 9, 2020 | Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously do... |
| CVE-2020-13127 | HIGH | 8.8 | 1.4% | Sep 9, 2020 | A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to... |
| CVE-2020-2042 | HIGH | 7.2 | 2.3% | Sep 9, 2020 | A buffer overflow vulnerability in the PAN-OS management web interface allows authenticated administrators to disrupt sy... |
| CVE-2020-2041 | HIGH | 7.5 | 2.1% | Sep 9, 2020 | An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to ... |
| CVE-2020-2038 | HIGH | 7.2 | 86.1% | Sep 9, 2020 | An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to exe... |
| CVE-2020-2037 | HIGH | 7.2 | 3.6% | Sep 9, 2020 | An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to exe... |
| CVE-2020-2036 | HIGH | 8.8 | 23.9% | Sep 9, 2020 | A reflected cross-site scripting (XSS) vulnerability exists in the PAN-OS management web interface. A remote attacker ab... |
| CVE-2020-25212 | HIGH | 7 | 0.3% | Sep 9, 2020 | A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt me... |
| CVE-2020-24566 | HIGH | 7.5 | 1.8% | Sep 9, 2020 | In Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user creates a deployment o... |
| CVE-2020-1749 | HIGH | 7.5 | 1.2% | Sep 9, 2020 | A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tu... |
| CVE-2020-14384 | HIGH | 7.5 | 1.4% | Sep 9, 2020 | A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBos... |
| CVE-2020-6320 | HIGH | 8.1 | 1.0% | Sep 9, 2020 | SAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain functions that are rest... |
| CVE-2020-6318 | HIGH | 7.2 | 5.6% | Sep 9, 2020 | A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (>... |
| CVE-2020-6302 | HIGH | 8.1 | 0.8% | Sep 9, 2020 | SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now