2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8713 | HIGH | 8.8 | 0.7% | Aug 13, 2020 | Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allo... |
| CVE-2020-8712 | HIGH | 7.8 | 0.4% | Aug 13, 2020 | Buffer overflow in a verification process for some Intel(R) Server Boards, Server Systems and Compute Modules before ver... |
| CVE-2020-8709 | HIGH | 8.8 | 0.7% | Aug 13, 2020 | Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before ve... |
| CVE-2020-8708 | HIGH | 8.8 | 0.7% | Aug 13, 2020 | Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allo... |
| CVE-2020-8707 | HIGH | 8.8 | 0.7% | Aug 13, 2020 | Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may al... |
| CVE-2020-8706 | HIGH | 8.8 | 0.7% | Aug 13, 2020 | Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may ... |
| CVE-2020-7304 | HIGH | 7.6 | 0.5% | Aug 13, 2020 | Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authe... |
| CVE-2020-16303 | HIGH | 7.8 | 1.8% | Aug 13, 2020 | A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v9... |
| CVE-2020-12287 | HIGH | 7.8 | 0.3% | Aug 13, 2020 | Incorrect permissions in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2020.2 may allow an authentica... |
| CVE-2020-15868 | HIGH | 7.5 | 1.1% | Aug 12, 2020 | Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control. |
| CVE-2020-16139 | HIGH | 7.5 | 79.8% | Aug 12, 2020 | A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the de... |
| CVE-2020-16138 | HIGH | 7.5 | 21.4% | Aug 12, 2020 | A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remot... |
| CVE-2020-7374 | HIGH | 7.8 | 3.1% | Aug 12, 2020 | Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validat... |
| CVE-2020-17360 | HIGH | 7.8 | 1.2% | Aug 12, 2020 | An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h contains multip... |
| CVE-2020-17505 | HIGH | 8.8 | 82.2% | Aug 12, 2020 | Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter i... |
| CVE-2020-17497 | HIGH | 8.1 | 0.7% | Aug 12, 2020 | eapol.c in iNet wireless daemon (IWD) through 1.8 allows attackers to trigger a PTK reinstallation by retransmitting EAP... |
| CVE-2020-12674 | HIGH | 7.5 | 6.2% | Aug 12, 2020 | In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of ze... |
| CVE-2020-12673 | HIGH | 7.5 | 6.2% | Aug 12, 2020 | In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-... |
| CVE-2020-12100 | HIGH | 7.5 | 5.2% | Aug 12, 2020 | In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denia... |
| CVE-2020-13291 | HIGH | 8.1 | 1.0% | Aug 12, 2020 | In GitLab before 13.2.3, project sharing could temporarily allow too permissive access. |
| CVE-2020-13290 | HIGH | 7.2 | 1.1% | Aug 12, 2020 | In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page |
| CVE-2020-6309 | HIGH | 7.5 | 1.8% | Aug 12, 2020 | SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11),... |
| CVE-2020-6301 | HIGH | 8.1 | 0.7% | Aug 12, 2020 | SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthor... |
| CVE-2020-6298 | HIGH | 8.1 | 1.0% | Aug 12, 2020 | SAP Banking Services (Generic Market Data), versions - 400, 450, 500, allows an unauthorized user to display protected B... |
| CVE-2020-6296 | HIGH | 8.8 | 1.3% | Aug 12, 2020 | SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, al... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now