2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14081 | HIGH | 8.8 | 2.2% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action send_log_ema... |
| CVE-2020-14079 | HIGH | 8.8 | 2.2% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
| CVE-2020-14078 | HIGH | 8.8 | 1.8% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
| CVE-2020-14077 | HIGH | 8.8 | 1.8% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
| CVE-2020-14075 | HIGH | 8.8 | 3.1% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connec... |
| CVE-2020-14074 | HIGH | 8.8 | 1.8% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
| CVE-2020-14060 | HIGH | 8.1 | 8.6% | Jun 14, 2020 | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-14062 | HIGH | 8.1 | 8.1% | Jun 14, 2020 | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-14061 | HIGH | 8.1 | 4.5% | Jun 14, 2020 | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-10752 | HIGH | 7.5 | 1.1% | Jun 12, 2020 | A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into t... |
| CVE-2020-14004 | HIGH | 7.8 | 0.7% | Jun 12, 2020 | An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd servi... |
| CVE-2020-9645 | HIGH | 7.5 | 3.3% | Jun 12, 2020 | Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability. Success... |
| CVE-2020-9643 | HIGH | 7.5 | 3.3% | Jun 12, 2020 | Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful ex... |
| CVE-2020-9636 | HIGH | 8.8 | 3.9% | Jun 12, 2020 | Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful exploitation could lead ... |
| CVE-2020-9635 | HIGH | 8.8 | 4.5% | Jun 12, 2020 | Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could le... |
| CVE-2020-9634 | HIGH | 8.8 | 4.5% | Jun 12, 2020 | Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could le... |
| CVE-2020-14048 | HIGH | 7.5 | 4.8% | Jun 12, 2020 | Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the install... |
| CVE-2020-4045 | HIGH | 7.5 | 1.3% | Jun 11, 2020 | SSB-DB version 20.0.0 has an information disclosure vulnerability. The get() method is supposed to only decrypt messages... |
| CVE-2020-13250 | HIGH | 7.5 | 2.9% | Jun 11, 2020 | HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching f... |
| CVE-2020-13170 | HIGH | 7.5 | 1.7% | Jun 11, 2020 | HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data cen... |
| CVE-2020-12758 | HIGH | 7.5 | 1.7% | Jun 11, 2020 | HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Intro... |
| CVE-2020-12725 | HIGH | 7.2 | 1.3% | Jun 11, 2020 | Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-... |
| CVE-2020-5411 | HIGH | 8.1 | 1.9% | Jun 11, 2020 | When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary... |
| CVE-2020-11614 | HIGH | 8.1 | 0.4% | Jun 11, 2020 | Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP. Addition... |
| CVE-2020-11613 | HIGH | 7.8 | 0.5% | Jun 11, 2020 | Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions b... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now