2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13124 | HIGH | 8.8 | 4.6% | Aug 11, 2020 | SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an a... |
| CVE-2020-14296 | HIGH | 7.1 | 0.6% | Aug 11, 2020 | Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible T... |
| CVE-2020-10783 | HIGH | 8.3 | 1.0% | Aug 11, 2020 | Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Operator group ... |
| CVE-2020-4486 | HIGH | 8.1 | 1.5% | Aug 11, 2020 | IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw af... |
| CVE-2020-9079 | HIGH | 8.8 | 0.4% | Aug 11, 2020 | FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product incorrectly uses a protectio... |
| CVE-2020-16277 | HIGH | 8.8 | 1.2% | Aug 10, 2020 | An SQL injection vulnerability in the Analytics component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, au... |
| CVE-2020-16276 | HIGH | 8.8 | 1.2% | Aug 10, 2020 | An SQL injection vulnerability in the Assets component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, authe... |
| CVE-2020-9078 | HIGH | 7.8 | 0.2% | Aug 10, 2020 | FusionCompute 8.0.0 have local privilege escalation vulnerability. A local, authenticated attacker could perform specifi... |
| CVE-2020-17478 | HIGH | 7.5 | 1.1% | Aug 10, 2020 | ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplicati... |
| CVE-2020-15659 | HIGH | 8.8 | 2.4% | Aug 10, 2020 | Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of... |
| CVE-2020-15657 | HIGH | 7.8 | 0.4% | Aug 10, 2020 | Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker tha... |
| CVE-2020-15656 | HIGH | 8.8 | 1.5% | Aug 10, 2020 | JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mit... |
| CVE-2020-15647 | HIGH | 7.4 | 1.1% | Aug 10, 2020 | A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, ... |
| CVE-2020-9528 | HIGH | 7.5 | 0.8% | Aug 10, 2020 | Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many different vendors in millions ... |
| CVE-2020-9525 | HIGH | 8.1 | 1.6% | Aug 10, 2020 | CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an authentication flaw that... |
| CVE-2020-8224 | HIGH | 7.8 | 0.7% | Aug 10, 2020 | A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL confi... |
| CVE-2020-6145 | HIGH | 8.8 | 1.8% | Aug 10, 2020 | An SQL injection vulnerability exists in the frappe.desk.reportview.get functionality of ERPNext 11.1.38. A specially cr... |
| CVE-2020-6070 | HIGH | 7.8 | 1.7% | Aug 10, 2020 | An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A spec... |
| CVE-2020-13295 | HIGH | 8.8 | 1.2% | Aug 10, 2020 | For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is sus... |
| CVE-2020-13293 | HIGH | 7.1 | 1.0% | Aug 10, 2020 | In GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override an existing hash. |
| CVE-2020-12781 | HIGH | 8.8 | 0.5% | Aug 10, 2020 | Combodo iTop contains a cross-site request forgery (CSRF) vulnerability, attackers can execute specific commands via mal... |
| CVE-2020-12780 | HIGH | 7.5 | 1.2% | Aug 10, 2020 | A security misconfiguration exists in Combodo iTop, which can expose sensitive information. |
| CVE-2020-12777 | HIGH | 7.5 | 1.3% | Aug 10, 2020 | A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inje... |
| CVE-2020-17452 | HIGH | 7.2 | 2.4% | Aug 9, 2020 | flatCore before 1.5.7 allows upload and execution of a .php file by an admin. |
| CVE-2020-15827 | HIGH | 7.5 | 0.7% | Aug 8, 2020 | In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now