2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3368 | MEDIUM | 5.8 | 1.4% | Jun 18, 2020 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA)... |
| CVE-2020-3364 | MEDIUM | 5.3 | 0.9% | Jun 18, 2020 | A vulnerability in the access control list (ACL) functionality of the standby route processor management interface of Ci... |
| CVE-2020-3362 | MEDIUM | 4.7 | 0.2% | Jun 18, 2020 | A vulnerability in the CLI of Cisco Network Services Orchestrator (NSO) could allow an authenticated, local attacker to ... |
| CVE-2020-3360 | MEDIUM | 5.3 | 1.3% | Jun 18, 2020 | A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated,... |
| CVE-2020-3356 | MEDIUM | 6.1 | 0.8% | Jun 18, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe... |
| CVE-2020-3355 | MEDIUM | 4.8 | 0.6% | Jun 18, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authent... |
| CVE-2020-3354 | MEDIUM | 4.8 | 0.6% | Jun 18, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authent... |
| CVE-2020-3350 | MEDIUM | 6.3 | 0.3% | Jun 18, 2020 | A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, loc... |
| CVE-2020-3347 | MEDIUM | 5.5 | 0.4% | Jun 18, 2020 | A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain acc... |
| CVE-2020-3337 | MEDIUM | 6.1 | 0.8% | Jun 18, 2020 | A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to redirect a user t... |
| CVE-2020-3245 | MEDIUM | 5.3 | 1.2% | Jun 18, 2020 | A vulnerability in the web application of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthentica... |
| CVE-2020-3244 | MEDIUM | 5.3 | 1.0% | Jun 18, 2020 | A vulnerability in the Enhanced Charging Service (ECS) functionality of Cisco ASR 5000 Series Aggregation Services Route... |
| CVE-2020-3242 | MEDIUM | 4.9 | 1.1% | Jun 18, 2020 | A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with administrative ... |
| CVE-2020-3241 | MEDIUM | 6.5 | 2.0% | Jun 18, 2020 | A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to perfor... |
| CVE-2020-3236 | MEDIUM | 6.7 | 0.5% | Jun 18, 2020 | A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local a... |
| CVE-2020-8619 | MEDIUM | 4.9 | 2.1% | Jun 17, 2020 | In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edi... |
| CVE-2020-8618 | MEDIUM | 4.9 | 1.8% | Jun 17, 2020 | An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger t... |
| CVE-2020-14408 | MEDIUM | 6.1 | 3.0% | Jun 17, 2020 | An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login rou... |
| CVE-2020-4532 | MEDIUM | 5.3 | 1.3% | Jun 17, 2020 | IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.... |
| CVE-2020-7932 | MEDIUM | 5.7 | 0.8% | Jun 17, 2020 | OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query paramet... |
| CVE-2020-14405 | MEDIUM | 6.5 | 1.9% | Jun 17, 2020 | An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size. |
| CVE-2020-14404 | MEDIUM | 5.4 | 1.6% | Jun 17, 2020 | An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings. |
| CVE-2020-14403 | MEDIUM | 5.4 | 1.6% | Jun 17, 2020 | An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings. |
| CVE-2020-14402 | MEDIUM | 5.4 | 1.9% | Jun 17, 2020 | An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings. |
| CVE-2020-14401 | MEDIUM | 6.5 | 2.4% | Jun 17, 2020 | An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now