2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10608 | HIGH | 7.8 | 0.2% | Jul 24, 2020 | In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity che... |
| CVE-2020-10606 | HIGH | 7.8 | 0.3% | Jul 24, 2020 | In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected ... |
| CVE-2020-10600 | HIGH | 7.1 | 0.8% | Jul 24, 2020 | An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. T... |
| CVE-2020-8207 | HIGH | 8.8 | 2.1% | Jul 24, 2020 | Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code exe... |
| CVE-2020-8174 | HIGH | 8.1 | 7.6% | Jul 24, 2020 | napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0. |
| CVE-2020-15932 | HIGH | 8.8 | 3.3% | Jul 24, 2020 | Overwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of privileges. |
| CVE-2020-8326 | HIGH | 7.8 | 0.4% | Jul 24, 2020 | An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that cou... |
| CVE-2020-8317 | HIGH | 7.8 | 0.4% | Jul 24, 2020 | A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allo... |
| CVE-2020-15778 | HIGH | 7.4 | 13.0% | Jul 24, 2020 | scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick charac... |
| CVE-2020-15924 | HIGH | 7.5 | 1.9% | Jul 24, 2020 | There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is req... |
| CVE-2020-15923 | HIGH | 7.5 | 3.3% | Jul 24, 2020 | Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal. |
| CVE-2020-7519 | HIGH | 7.5 | 1.3% | Jul 23, 2020 | A CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could al... |
| CVE-2020-7518 | HIGH | 7.5 | 1.1% | Jul 23, 2020 | A CWE-20: Improper input validation vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allo... |
| CVE-2020-7516 | HIGH | 7.8 | 0.2% | Jul 23, 2020 | A CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy Builder V1.4.7.2 and pri... |
| CVE-2020-7515 | HIGH | 7.8 | 0.3% | Jul 23, 2020 | A CWE-321: Use of hard-coded cryptographic key stored in cleartext vulnerability exists in Easergy Builder V1.4.7.2 and ... |
| CVE-2020-7514 | HIGH | 7.8 | 0.2% | Jul 23, 2020 | A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy Builder (Version 1.4.7.2 and... |
| CVE-2020-7491 | HIGH | 7.5 | 1.3% | Jul 23, 2020 | **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 t... |
| CVE-2020-15633 | HIGH | 8.8 | 2.8% | Jul 23, 2020 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-86... |
| CVE-2020-15632 | HIGH | 8.8 | 3.3% | Jul 23, 2020 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-84... |
| CVE-2020-15631 | HIGH | 8 | 2.9% | Jul 23, 2020 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1... |
| CVE-2020-10922 | HIGH | 7.5 | 3.7% | Jul 23, 2020 | This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE H... |
| CVE-2020-10918 | HIGH | 7.5 | 2.7% | Jul 23, 2020 | This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware... |
| CVE-2020-15887 | HIGH | 8.8 | 1.3% | Jul 23, 2020 | A SQL injection vulnerability in softwareupdate_controller.php in the Software Update module before 1.6 for MunkiReport ... |
| CVE-2020-15886 | HIGH | 8.8 | 1.3% | Jul 23, 2020 | A SQL injection vulnerability in reportdata_controller.php in the reportdata module before 3.5 for MunkiReport allows at... |
| CVE-2020-15884 | HIGH | 8.8 | 1.2% | Jul 23, 2020 | A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL co... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now