2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4686 | HIGH | 8.1 | 1.6% | Aug 17, 2020 | IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform ... |
| CVE-2020-13941 | HIGH | 8.8 | 3.8% | Aug 17, 2020 | Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handl... |
| CVE-2020-17475 | HIGH | 7.5 | 0.9% | Aug 14, 2020 | Lack of authentication in the network relays used in MEGVII Koala 2.9.1-c3s allows attackers to grant physical access to... |
| CVE-2020-15694 | HIGH | 7.5 | 2.3% | Aug 14, 2020 | In Nim 1.2.4, the standard library httpClient fails to properly validate the server response. For example, httpClient.ge... |
| CVE-2020-9767 | HIGH | 7.8 | 0.8% | Aug 14, 2020 | A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who ... |
| CVE-2020-9708 | HIGH | 7.5 | 2.9% | Aug 14, 2020 | The resolveRepositoryPath function doesn't properly validate user input and a malicious user may traverse to any valid G... |
| CVE-2020-15145 | HIGH | 8.2 | 0.4% | Aug 14, 2020 | In Composer-Setup for Windows before version 6.0.0, if the developer's computer is shared with other users, a local atta... |
| CVE-2020-7583 | HIGH | 7.8 | 0.3% | Aug 14, 2020 | A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All ve... |
| CVE-2020-22722 | HIGH | 7.8 | 0.5% | Aug 14, 2020 | Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe ... |
| CVE-2020-22721 | HIGH | 7.8 | 0.5% | Aug 14, 2020 | A File Upload Vulnerability in PNotes - Andrey Gruber PNotes.NET v3.8.1.2 allows a local attacker to execute arbitrary c... |
| CVE-2020-9228 | HIGH | 7.5 | 0.8% | Aug 14, 2020 | FusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection of certain information, ... |
| CVE-2020-17462 | HIGH | 7.8 | 1.0% | Aug 14, 2020 | CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a... |
| CVE-2020-16205 | HIGH | 7.2 | 60.4% | Aug 14, 2020 | Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code ... |
| CVE-2020-4662 | HIGH | 8.8 | 1.3% | Aug 14, 2020 | IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication v... |
| CVE-2020-7360 | HIGH | 7.3 | 0.5% | Aug 13, 2020 | An Uncontrolled Search Path Element (CWE-427) vulnerability in SmartControl version 4.3.15 and versions released before ... |
| CVE-2020-24346 | HIGH | 7.8 | 1.0% | Aug 13, 2020 | njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c. |
| CVE-2020-24345 | HIGH | 7.8 | 0.8% | Aug 13, 2020 | JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the ve... |
| CVE-2020-24344 | HIGH | 7.1 | 0.8% | Aug 13, 2020 | JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read. |
| CVE-2020-24343 | HIGH | 7.8 | 0.8% | Aug 13, 2020 | Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c. |
| CVE-2020-24342 | HIGH | 7.8 | 1.1% | Aug 13, 2020 | Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_ca... |
| CVE-2020-24331 | HIGH | 7.8 | 0.5% | Aug 13, 2020 | An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user sti... |
| CVE-2020-24330 | HIGH | 7.8 | 0.5% | Aug 13, 2020 | An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the... |
| CVE-2020-0261 | HIGH | 7.8 | 0.2% | Aug 13, 2020 | In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. This could lead to local... |
| CVE-2020-15947 | HIGH | 8.8 | 1.1% | Aug 13, 2020 | A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows... |
| CVE-2020-15925 | HIGH | 8.8 | 1.1% | Aug 13, 2020 | A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers t... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now