2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-3180HIGH7.8A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected d...
CVE-2020-3146HIGH8.8Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Ro...
CVE-2020-3145HIGH8.8Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Ro...
CVE-2020-4462HIGH8.2IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0,...
CVE-2020-10286HIGH8.8the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to p...
CVE-2020-9309HIGH8.8Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file ex...
CVE-2020-8958HIGH7.2Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow...
CVE-2020-6164HIGH7.5In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can b...
CVE-2020-15779HIGH7.5A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js. The socket.io-file::crea...
CVE-2020-15603HIGH7.5An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products'...
CVE-2020-15602HIGH7.8An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and bel...
CVE-2020-14066HIGH8.8IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to acces...
CVE-2020-12854HIGH8.8A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can ...
CVE-2020-11439HIGH8.8LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed wi...
CVE-2020-11438HIGH8.8LibreHealth EMR v2.0.0 is affected by systemic CSRF.
CVE-2020-2984HIGH7.1Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager (component: Discovery and collect...
CVE-2020-2983HIGH7.1Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager (component: Data Masking). ...
CVE-2020-2982HIGH7.1Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config...
CVE-2020-2981HIGH7Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1...
CVE-2020-2968HIGH8Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12....
CVE-2020-2967HIGH7.5Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ver...
CVE-2020-2228HIGH8.8Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting in ...
CVE-2020-14724HIGH7.3Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). The supported version ...
CVE-2020-14723HIGH8.2Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware (component: Web UIX). Supported versio...
CVE-2020-14720HIGH7.7Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utili...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now