2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14159 | HIGH | 8.8 | 1.9% | Jun 15, 2020 | By using an Automate API in ConnectWise Automate before 2020.5.178, a remote authenticated user could execute commands a... |
| CVE-2020-13651 | HIGH | 7.8 | 0.9% | Jun 15, 2020 | An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430. It all... |
| CVE-2020-13650 | HIGH | 7.5 | 1.0% | Jun 15, 2020 | An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to ... |
| CVE-2020-14156 | HIGH | 8.8 | 1.8% | Jun 15, 2020 | user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has str... |
| CVE-2020-14149 | HIGH | 7.5 | 2.3% | Jun 15, 2020 | In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereferenc... |
| CVE-2020-14148 | HIGH | 7.5 | 2.6% | Jun 15, 2020 | The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the... |
| CVE-2020-14147 | HIGH | 7.7 | 3.1% | Jun 15, 2020 | An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with... |
| CVE-2020-14153 | HIGH | 7.1 | 1.1% | Jun 15, 2020 | In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers... |
| CVE-2020-14152 | HIGH | 7.1 | 1.5% | Jun 15, 2020 | In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use se... |
| CVE-2020-3961 | HIGH | 7.8 | 0.4% | Jun 15, 2020 | VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permissio... |
| CVE-2020-13150 | HIGH | 7.8 | 0.3% | Jun 15, 2020 | D-link DSL-2750U ISL2750UEME3.V1E devices allow approximately 90 seconds of access to the control panel, after a restart... |
| CVE-2020-4494 | HIGH | 7.5 | 2.2% | Jun 15, 2020 | IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum P... |
| CVE-2020-4470 | HIGH | 8 | 1.9% | Jun 15, 2020 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload a... |
| CVE-2020-0597 | HIGH | 7.5 | 3.0% | Jun 15, 2020 | Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticat... |
| CVE-2020-0596 | HIGH | 7.5 | 2.2% | Jun 15, 2020 | Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.... |
| CVE-2020-0586 | HIGH | 7.8 | 0.4% | Jun 15, 2020 | Improper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 ma... |
| CVE-2020-0542 | HIGH | 7.8 | 0.4% | Jun 15, 2020 | Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may al... |
| CVE-2020-0540 | HIGH | 7.5 | 2.0% | Jun 15, 2020 | Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a... |
| CVE-2020-0538 | HIGH | 7.5 | 2.3% | Jun 15, 2020 | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allo... |
| CVE-2020-0536 | HIGH | 7.5 | 1.7% | Jun 15, 2020 | Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 1... |
| CVE-2020-0534 | HIGH | 7.5 | 1.9% | Jun 15, 2020 | Improper input validation in the DAL subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 m... |
| CVE-2020-0532 | HIGH | 7.1 | 0.6% | Jun 15, 2020 | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allo... |
| CVE-2020-0529 | HIGH | 7.8 | 0.3% | Jun 15, 2020 | Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow... |
| CVE-2020-0528 | HIGH | 7.8 | 0.3% | Jun 15, 2020 | Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families... |
| CVE-2020-14076 | HIGH | 8.8 | 2.6% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now