2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12406 | HIGH | 8.8 | 1.0% | Jul 9, 2020 | Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We ... |
| CVE-2020-12398 | HIGH | 7.5 | 1.0% | Jul 9, 2020 | If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbi... |
| CVE-2020-7457 | HIGH | 8.1 | 33.0% | Jul 9, 2020 | In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 1... |
| CVE-2020-9377 | HIGH | 8.8 | 21.3% | Jul 9, 2020 | D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability onl... |
| CVE-2020-9376 | HIGH | 7.5 | 16.6% | Jul 9, 2020 | D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php. NOTE... |
| CVE-2020-5604 | HIGH | 8.1 | 2.0% | Jul 9, 2020 | Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a re... |
| CVE-2020-5974 | HIGH | 7.8 | 0.3% | Jul 8, 2020 | NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are i... |
| CVE-2020-15072 | HIGH | 8.8 | 1.2% | Jul 8, 2020 | An issue was discovered in phpList through 3.5.4. An error-based SQL Injection vulnerability exists via the Import Admin... |
| CVE-2020-2034 | HIGH | 8.1 | 6.6% | Jul 8, 2020 | An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacke... |
| CVE-2020-2030 | HIGH | 7.2 | 2.5% | Jul 8, 2020 | An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to exe... |
| CVE-2020-6938 | HIGH | 7.5 | 1.2% | Jul 8, 2020 | A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26,... |
| CVE-2020-5839 | HIGH | 7.5 | 2.0% | Jul 8, 2020 | Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is ... |
| CVE-2020-11994 | HIGH | 7.5 | 4.5% | Jul 8, 2020 | Server-Side Template Injection and arbitrary file disclosure on Camel templating components |
| CVE-2020-5764 | HIGH | 8.8 | 2.0% | Jul 8, 2020 | MX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal vulnerability when user is usin... |
| CVE-2020-3973 | HIGH | 8.8 | 1.1% | Jul 8, 2020 | The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious act... |
| CVE-2020-15008 | HIGH | 7.5 | 0.9% | Jul 7, 2020 | A SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or 2019.12. A SQL Injection in the pr... |
| CVE-2020-12736 | HIGH | 7.2 | 2.0% | Jul 7, 2020 | Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an... |
| CVE-2020-15515 | HIGH | 8.8 | 1.9% | Jul 7, 2020 | The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution. |
| CVE-2020-15579 | HIGH | 7.5 | 0.4% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factor... |
| CVE-2020-15576 | HIGH | 7.5 | 1.5% | Jul 7, 2020 | SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response. |
| CVE-2020-15574 | HIGH | 7.5 | 1.5% | Jul 7, 2020 | SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893. |
| CVE-2020-10745 | HIGH | 7.5 | 3.9% | Jul 7, 2020 | A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios ... |
| CVE-2020-15567 | HIGH | 7.8 | 0.3% | Jul 7, 2020 | An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of ser... |
| CVE-2020-15565 | HIGH | 8.8 | 0.4% | Jul 7, 2020 | An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of servic... |
| CVE-2020-5600 | HIGH | 7.5 | 2.0% | Jul 7, 2020 | TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier insta... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now