2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7711 | HIGH | 7.5 | 1.8% | Aug 23, 2020 | This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference ca... |
| CVE-2020-5417 | HIGH | 8.8 | 1.0% | Aug 21, 2020 | Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also t... |
| CVE-2020-9063 | HIGH | 7.6 | 0.7% | Aug 21, 2020 | NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communic... |
| CVE-2020-8623 | HIGH | 7.5 | 6.3% | Aug 21, 2020 | In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Suppor... |
| CVE-2020-8621 | HIGH | 7.5 | 2.9% | Aug 21, 2020 | In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' t... |
| CVE-2020-8620 | HIGH | 7.5 | 3.7% | Aug 21, 2020 | In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data... |
| CVE-2020-10126 | HIGH | 7.6 | 0.3% | Aug 21, 2020 | NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA),... |
| CVE-2020-10125 | HIGH | 7.6 | 0.2% | Aug 21, 2020 | NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acce... |
| CVE-2020-10124 | HIGH | 7.1 | 0.7% | Aug 21, 2020 | NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between t... |
| CVE-2020-15147 | HIGH | 8.5 | 2.0% | Aug 21, 2020 | Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exp... |
| CVE-2020-24057 | HIGH | 8.8 | 5.5% | Aug 21, 2020 | The management website of the Verint S5120FD Verint_FW_0_42 unit features a CGI endpoint ('ipfilter.cgi') that allows th... |
| CVE-2020-24056 | HIGH | 7.5 | 1.2% | Aug 21, 2020 | A hardcoded credentials vulnerability exists in Verint 5620PTZ Verint_FW_0_42, Verint 4320 V4320_FW_0_23, V4320_FW_0_31,... |
| CVE-2020-24053 | HIGH | 7.5 | 1.2% | Aug 21, 2020 | Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidential... |
| CVE-2020-15309 | HIGH | 7 | 0.3% | Aug 21, 2020 | An issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local attackers can conduct a ca... |
| CVE-2020-12457 | HIGH | 7.5 | 1.5% | Aug 21, 2020 | An issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS) message processing logic for... |
| CVE-2020-5774 | HIGH | 7.1 | 0.3% | Aug 21, 2020 | Nessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted period in certain scenarios... |
| CVE-2020-15070 | HIGH | 8.8 | 1.2% | Aug 21, 2020 | Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres... |
| CVE-2020-14215 | HIGH | 7.5 | 0.9% | Aug 21, 2020 | Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrato... |
| CVE-2020-24574 | HIGH | 7.8 | 0.6% | Aug 21, 2020 | The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local pri... |
| CVE-2020-24571 | HIGH | 7.5 | 18.0% | Aug 21, 2020 | NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal. |
| CVE-2020-24567 | HIGH | 7.8 | 0.6% | Aug 21, 2020 | voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file... |
| CVE-2020-24359 | HIGH | 7.5 | 1.0% | Aug 20, 2020 | HashiCorp vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet i... |
| CVE-2020-16282 | HIGH | 8.8 | 0.4% | Aug 20, 2020 | In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged... |
| CVE-2020-16281 | HIGH | 7.8 | 0.3% | Aug 20, 2020 | The Kommbox component in Rangee GmbH RangeeOS 8.0.4 could allow a local authenticated attacker to escape from the restri... |
| CVE-2020-10289 | HIGH | 8.8 | 1.9% | Aug 20, 2020 | Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YA... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now