2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13188 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-13187 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-0236 | HIGH | 7.5 | 0.8% | Jan 26, 2021 | In A2DP_GetCodecType of a2dp_codec_config, there is a possible out-of-bounds read due to improper input validation. This... |
| CVE-2020-28492 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA |
| CVE-2020-4949 | HIGH | 8.2 | 4.8% | Jan 26, 2021 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack w... |
| CVE-2020-4889 | LOW | 3.3 | 0.3% | Jan 26, 2021 | IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact suppo... |
| CVE-2020-17532 | HIGH | 8.8 | 3.2% | Jan 25, 2021 | When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause ... |
| CVE-2020-12525 | HIGH | 7.8 | 1.3% | Jan 22, 2021 | M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deser... |
| CVE-2020-12514 | MEDIUM | 4.9 | 1.0% | Jan 22, 2021 | Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a ... |
| CVE-2020-12513 | HIGH | 8.8 | 31.1% | Jan 22, 2021 | Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection... |
| CVE-2020-12512 | MEDIUM | 5.4 | 0.7% | Jan 22, 2021 | Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site ... |
| CVE-2020-12511 | HIGH | 8.8 | 0.6% | Jan 22, 2021 | Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the ... |
| CVE-2020-28487 | MEDIUM | 6.8 | 1.4% | Jan 22, 2021 | This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline elem... |
| CVE-2020-4766 | HIGH | 7.5 | 1.5% | Jan 22, 2021 | IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ dat... |
| CVE-2020-28488 | — | — | — | Jan 22, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-8570 | CRITICAL | 9.1 | 3.5% | Jan 21, 2021 | Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the curr... |
| CVE-2020-8569 | MEDIUM | 6.5 | 2.3% | Jan 21, 2021 | Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resour... |
| CVE-2020-8568 | MEDIUM | 6.5 | 1.3% | Jan 21, 2021 | Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassP... |
| CVE-2020-8567 | MEDIUM | 6.5 | 1.4% | Jan 21, 2021 | Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to... |
| CVE-2020-8554 | MEDIUM | 5 | 9.3% | Jan 21, 2021 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter... |
| CVE-2020-4969 | MEDIUM | 5.9 | 0.7% | Jan 21, 2021 | IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, c... |
| CVE-2020-4968 | MEDIUM | 6.5 | 0.3% | Jan 21, 2021 | IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could al... |
| CVE-2020-4966 | MEDIUM | 4.3 | 1.4% | Jan 21, 2021 | IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or ses... |
| CVE-2020-4958 | CRITICAL | 9.8 | 1.7% | Jan 21, 2021 | IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requi... |
| CVE-2020-26295 | HIGH | 7.2 | 1.8% | Jan 21, 2021 | OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrat... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now