2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-24160 | HIGH | 7.8 | 0.5% | Sep 3, 2020 | Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers t... |
| CVE-2020-24159 | HIGH | 7.8 | 0.4% | Sep 3, 2020 | NetEase Youdao Dictionary has a DLL hijacking vulnerability, which can be exploited by attackers to gain server permissi... |
| CVE-2020-24158 | HIGH | 7.8 | 0.3% | Sep 3, 2020 | 360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute maliciou... |
| CVE-2020-23811 | HIGH | 7.5 | 1.2% | Sep 3, 2020 | xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.jav... |
| CVE-2020-25068 | HIGH | 7.5 | 3.9% | Sep 3, 2020 | Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unau... |
| CVE-2020-25042 | HIGH | 7.2 | 18.1% | Sep 3, 2020 | An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authentic... |
| CVE-2020-24948 | HIGH | 7.2 | 13.1% | Sep 3, 2020 | The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitimat... |
| CVE-2020-7381 | HIGH | 7.8 | 0.7% | Sep 3, 2020 | In Rapid7 Nexpose installer versions prior to 6.6.40, the Nexpose installer calls an executable which can be placed in t... |
| CVE-2020-4638 | HIGH | 7.2 | 1.7% | Sep 3, 2020 | IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API... |
| CVE-2020-24949 | HIGH | 8.8 | 67.3% | Sep 3, 2020 | Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a cr... |
| CVE-2020-7729 | HIGH | 7.1 | 2.4% | Sep 3, 2020 | The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load(... |
| CVE-2020-5420 | HIGH | 7.7 | 1.2% | Sep 3, 2020 | Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause de... |
| CVE-2020-5386 | HIGH | 7.5 | 1.3% | Sep 2, 2020 | Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker c... |
| CVE-2020-5369 | HIGH | 8.8 | 1.2% | Sep 2, 2020 | Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalat... |
| CVE-2020-7830 | HIGH | 7.8 | 0.8% | Sep 2, 2020 | RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lac... |
| CVE-2020-5779 | HIGH | 7.5 | 1.1% | Sep 2, 2020 | A flaw in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) relates to invalid parameter handling when calling strcpy_s... |
| CVE-2020-5778 | HIGH | 7.5 | 1.3% | Sep 2, 2020 | A flaw exists in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) due to improper validation of user-supplied data whe... |
| CVE-2020-25045 | HIGH | 7.8 | 0.4% | Sep 2, 2020 | Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were... |
| CVE-2020-25044 | HIGH | 7.1 | 0.3% | Sep 2, 2020 | Kaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was vulnerable to arbitrary file corruption that could provide an... |
| CVE-2020-25043 | HIGH | 7.1 | 0.3% | Sep 2, 2020 | The installer of Kaspersky VPN Secure Connection prior to 5.0 was vulnerable to arbitrary file deletion that could allow... |
| CVE-2020-15167 | HIGH | 8.6 | 0.4% | Sep 2, 2020 | In Miller (command line utility) using the configuration file support introduced in version 5.9.0, it is possible for an... |
| CVE-2020-15094 | HIGH | 8.8 | 3.0% | Sep 2, 2020 | In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on... |
| CVE-2020-24028 | HIGH | 8.8 | 2.3% | Sep 2, 2020 | ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, passwor... |
| CVE-2020-23830 | HIGH | 7.1 | 0.5% | Sep 2, 2020 | A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 a... |
| CVE-2020-14209 | HIGH | 8.8 | 27.5% | Sep 2, 2020 | Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code executio... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now