2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14352 | HIGH | 8 | 2.5% | Aug 30, 2020 | A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to ... |
| CVE-2020-7712 | HIGH | 7.2 | 3.1% | Aug 30, 2020 | This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function. |
| CVE-2020-24972 | HIGH | 8.8 | 4.7% | Aug 29, 2020 | The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code ... |
| CVE-2020-24897 | HIGH | 8.9 | 0.9% | Aug 29, 2020 | The Table Filter and Charts for Confluence Server app before 5.3.25 (for Atlassian Confluence) allow remote attackers to... |
| CVE-2020-25019 | HIGH | 7.5 | 1.0% | Aug 29, 2020 | jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verify... |
| CVE-2020-3566 | HIGH | 8.6 | 4.0% | Aug 29, 2020 | A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow a... |
| CVE-2020-15159 | HIGH | 7.6 | 2.2% | Aug 28, 2020 | baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE). This may be execut... |
| CVE-2020-15155 | HIGH | 7.3 | 1.3% | Aug 28, 2020 | baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is req... |
| CVE-2020-15154 | HIGH | 7.3 | 1.0% | Aug 28, 2020 | baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is req... |
| CVE-2020-9298 | HIGH | 7.5 | 1.3% | Aug 28, 2020 | The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an att... |
| CVE-2020-4559 | HIGH | 7.5 | 1.3% | Aug 28, 2020 | IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user... |
| CVE-2020-10518 | HIGH | 8.8 | 3.7% | Aug 27, 2020 | A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a... |
| CVE-2020-8602 | HIGH | 7.2 | 4.2% | Aug 27, 2020 | A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protecti... |
| CVE-2020-15605 | HIGH | 8.1 | 2.8% | Aug 27, 2020 | If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2... |
| CVE-2020-15601 | HIGH | 8.1 | 2.8% | Aug 27, 2020 | If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Deep Security 10.x-12.x co... |
| CVE-2020-24717 | HIGH | 7.8 | 0.5% | Aug 27, 2020 | OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by ... |
| CVE-2020-24716 | HIGH | 7.8 | 0.5% | Aug 27, 2020 | OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories. |
| CVE-2020-24196 | HIGH | 7.2 | 2.7% | Aug 27, 2020 | An Arbitrary File Upload in Vehicle Image Upload in Online Bike Rental v1.0 allows authenticated admin to conduct remote... |
| CVE-2020-3517 | HIGH | 8.6 | 1.4% | Aug 27, 2020 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an un... |
| CVE-2020-3454 | HIGH | 7.2 | 2.6% | Aug 27, 2020 | A vulnerability in the Call Home feature of Cisco NX-OS Software could allow an authenticated, remote attacker to inject... |
| CVE-2020-3415 | HIGH | 8.8 | 0.8% | Aug 27, 2020 | A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent att... |
| CVE-2020-3398 | HIGH | 8.6 | 1.8% | Aug 27, 2020 | A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could a... |
| CVE-2020-3397 | HIGH | 8.6 | 1.8% | Aug 27, 2020 | A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could a... |
| CVE-2020-3394 | HIGH | 7.8 | 0.3% | Aug 27, 2020 | A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in... |
| CVE-2020-3338 | HIGH | 7.5 | 1.8% | Aug 27, 2020 | A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software cou... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now