2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-15825HIGH8.8In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges.
CVE-2020-15824HIGH8.8In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there ...
CVE-2020-15823HIGH7.5JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component.
CVE-2020-15817HIGH8.8In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues.
CVE-2020-15063HIGH8.8DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass auth...
CVE-2020-15062HIGH8.8DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate pri...
CVE-2020-15059HIGH8.8Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass auth...
CVE-2020-15058HIGH8.8Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate pri...
CVE-2020-15055HIGH8.8TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass auth...
CVE-2020-15054HIGH8.8TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate pri...
CVE-2020-15480HIGH8.8An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The...
CVE-2020-15479HIGH8.8An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The...
CVE-2020-17352HIGH8.8Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow a...
CVE-2020-15138HIGH7.5Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that a...
CVE-2020-9490HIGH7.5Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 reques...
CVE-2020-7810HIGH8.8hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and ex...
CVE-2020-11993HIGH7.5Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic e...
CVE-2020-11852HIGH8.8DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting all SMG Appliance runnin...
CVE-2020-8026HIGH7.8A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSU...
CVE-2020-16227HIGH7.8Delta Electronics TPEditor Versions 1.97 and prior. An improper input validation may be exploited by processing a specia...
CVE-2020-16225HIGH7.8Delta Electronics TPEditor Versions 1.97 and prior. A write-what-where condition may be exploited by processing a specia...
CVE-2020-16223HIGH7.8Delta Electronics TPEditor Versions 1.97 and prior. A heap-based buffer overflow may be exploited by processing a specia...
CVE-2020-16221HIGH7.8Delta Electronics TPEditor Versions 1.97 and prior. A stack-based buffer overflow may be exploited by processing a speci...
CVE-2020-16219HIGH7.8Delta Electronics TPEditor Versions 1.97 and prior. An out-of-bounds read may be exploited by processing specially craft...
CVE-2020-15702HIGH7TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code....

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now