2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5963 | HIGH | 7.8 | 0.5% | Jun 25, 2020 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in wh... |
| CVE-2020-15046 | HIGH | 8.8 | 2.3% | Jun 24, 2020 | The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to... |
| CVE-2020-5962 | HIGH | 7.8 | 0.3% | Jun 24, 2020 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in whic... |
| CVE-2020-13247 | HIGH | 7.3 | 1.0% | Jun 24, 2020 | BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled duri... |
| CVE-2020-3962 | HIGH | 8.2 | 0.6% | Jun 24, 2020 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), ... |
| CVE-2020-11961 | HIGH | 7.5 | 1.2% | Jun 24, 2020 | Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface get... |
| CVE-2020-11959 | HIGH | 7.5 | 1.4% | Jun 24, 2020 | An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50. |
| CVE-2020-9494 | HIGH | 7.5 | 3.9% | Jun 24, 2020 | Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADE... |
| CVE-2020-6870 | HIGH | 8 | 0.6% | Jun 24, 2020 | The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit t... |
| CVE-2020-3969 | HIGH | 7.8 | 0.5% | Jun 24, 2020 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), ... |
| CVE-2020-14017 | HIGH | 7.5 | 1.2% | Jun 24, 2020 | An issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information such as CSRF tokens, are ... |
| CVE-2020-14015 | HIGH | 7.5 | 1.4% | Jun 24, 2020 | An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation cod... |
| CVE-2020-13700 | HIGH | 7.5 | 13.0% | Jun 24, 2020 | An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object r... |
| CVE-2020-13443 | HIGH | 8.8 | 4.3% | Jun 24, 2020 | ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose... |
| CVE-2020-14005 | HIGH | 8.8 | 14.3% | Jun 24, 2020 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to ex... |
| CVE-2020-15014 | HIGH | 8.8 | 0.5% | Jun 24, 2020 | pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF. |
| CVE-2020-12865 | HIGH | 8 | 1.5% | Jun 24, 2020 | A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network a... |
| CVE-2020-12861 | HIGH | 8.8 | 3.0% | Jun 24, 2020 | A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as t... |
| CVE-2020-7667 | HIGH | 7.5 | 1.6% | Jun 24, 2020 | In package github.com/sassoftware/go-rpmutils/cpio before version 0.1.0, the CPIO extraction functionality doesn't sanit... |
| CVE-2020-10280 | HIGH | 7.5 | 1.2% | Jun 24, 2020 | The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, eff... |
| CVE-2020-10274 | HIGH | 7.1 | 0.9% | Jun 24, 2020 | The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly available default... |
| CVE-2020-10273 | HIGH | 7.5 | 0.9% | Jun 24, 2020 | MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellectual proper... |
| CVE-2020-12033 | HIGH | 8.8 | 1.1% | Jun 23, 2020 | In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not ... |
| CVE-2020-5367 | HIGH | 8.1 | 0.6% | Jun 23, 2020 | Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions p... |
| CVE-2020-14978 | HIGH | 8.1 | 3.1% | Jun 23, 2020 | An issue was discovered in F-Secure SAFE 17.7 on macOS. Due to incorrect client version verification, an attacker can co... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now