2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5603 | HIGH | 7.5 | 1.3% | Jun 30, 2020 | Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Conf... |
| CVE-2020-5602 | HIGH | 7.5 | 1.4% | Jun 30, 2020 | Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configura... |
| CVE-2020-5601 | HIGH | 8.8 | 1.6% | Jun 30, 2020 | Chrome Extension for e-Tax Reception System Ver1.0.0.0 allows remote attackers to execute an arbitrary command via unspe... |
| CVE-2020-5584 | HIGH | 7.5 | 1.3% | Jun 30, 2020 | Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors. |
| CVE-2020-5580 | HIGH | 8.1 | 1.1% | Jun 30, 2020 | Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Sin... |
| CVE-2020-15395 | HIGH | 7.8 | 1.1% | Jun 30, 2020 | In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multi... |
| CVE-2020-4067 | HIGH | 7.5 | 1.8% | Jun 29, 2020 | In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There... |
| CVE-2020-14414 | HIGH | 8.8 | 3.7% | Jun 29, 2020 | NeDi 1.9C is vulnerable to Remote Command Execution. pwsec.php improperly escapes shell metacharacters from a POST reque... |
| CVE-2020-14412 | HIGH | 8.8 | 3.7% | Jun 29, 2020 | NeDi 1.9C is vulnerable to Remote Command Execution. System-Snapshot.php improperly escapes shell metacharacters from a ... |
| CVE-2020-4452 | HIGH | 7.5 | 0.8% | Jun 29, 2020 | IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic algorithms that could allow an a... |
| CVE-2020-12048 | HIGH | 7.5 | 0.5% | Jun 29, 2020 | Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit ... |
| CVE-2020-12037 | HIGH | 7.5 | 0.5% | Jun 29, 2020 | Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit... |
| CVE-2020-12036 | HIGH | 7.5 | 0.5% | Jun 29, 2020 | Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit... |
| CVE-2020-12008 | HIGH | 7.5 | 0.9% | Jun 29, 2020 | Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to co... |
| CVE-2020-8019 | HIGH | 7.8 | 0.5% | Jun 29, 2020 | A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo ... |
| CVE-2020-8014 | HIGH | 7.8 | 0.5% | Jun 29, 2020 | A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE ... |
| CVE-2020-8022 | HIGH | 7.8 | 0.9% | Jun 29, 2020 | A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterp... |
| CVE-2020-15360 | HIGH | 7.8 | 0.7% | Jun 27, 2020 | com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification. |
| CVE-2020-9628 | HIGH | 7.5 | 3.5% | Jun 26, 2020 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful e... |
| CVE-2020-9627 | HIGH | 7.5 | 3.5% | Jun 26, 2020 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful e... |
| CVE-2020-9625 | HIGH | 7.5 | 3.5% | Jun 26, 2020 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful e... |
| CVE-2020-9591 | HIGH | 7.5 | 3.4% | Jun 26, 2020 | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a ... |
| CVE-2020-9588 | HIGH | 7.2 | 2.5% | Jun 26, 2020 | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an... |
| CVE-2020-9587 | HIGH | 7.5 | 5.0% | Jun 26, 2020 | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an... |
| CVE-2020-9574 | HIGH | 7.8 | 3.4% | Jun 26, 2020 | Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now