2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13757 | HIGH | 7.5 | 1.4% | Jun 1, 2020 | Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security... |
| CVE-2020-13695 | HIGH | 7.2 | 1.4% | Jun 1, 2020 | In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user has sudo privileges t... |
| CVE-2020-13694 | HIGH | 8.8 | 1.7% | Jun 1, 2020 | In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user can execute sudo mysq... |
| CVE-2020-13448 | HIGH | 8.8 | 17.8% | Jun 1, 2020 | QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated remote attacker to execut... |
| CVE-2020-12062 | HIGH | 7.5 | 2.2% | Jun 1, 2020 | The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, whi... |
| CVE-2020-7660 | HIGH | 8.1 | 3.0% | Jun 1, 2020 | serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" ... |
| CVE-2020-7659 | HIGH | 7.5 | 1.3% | Jun 1, 2020 | reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing... |
| CVE-2020-4020 | HIGH | 7.2 | 1.7% | Jun 1, 2020 | The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who cont... |
| CVE-2020-4019 | HIGH | 7.8 | 0.4% | Jun 1, 2020 | The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the ap... |
| CVE-2020-4018 | HIGH | 8.8 | 0.6% | Jun 1, 2020 | The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to complete the setup... |
| CVE-2020-7654 | HIGH | 7.5 | 1.1% | May 29, 2020 | All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. It logs private keys if logging level ... |
| CVE-2020-6937 | HIGH | 7.5 | 1.2% | May 29, 2020 | A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allo... |
| CVE-2020-3957 | HIGH | 7 | 0.2% | May 29, 2020 | VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.... |
| CVE-2020-1870 | HIGH | 7.5 | 0.7% | May 29, 2020 | There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage ma... |
| CVE-2020-1832 | HIGH | 8.8 | 0.5% | May 29, 2020 | E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnera... |
| CVE-2020-8816 | HIGH | 7.2 | 77.8% | May 29, 2020 | Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l... |
| CVE-2020-13634 | HIGH | 7.8 | 0.4% | May 29, 2020 | In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users ... |
| CVE-2020-12675 | HIGH | 8.8 | 2.8% | May 29, 2020 | The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks... |
| CVE-2020-4352 | HIGH | 7 | 0.3% | May 29, 2020 | IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IB... |
| CVE-2020-13173 | HIGH | 7.8 | 0.2% | May 28, 2020 | Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent fo... |
| CVE-2020-8330 | HIGH | 7.5 | 1.5% | May 28, 2020 | A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN tha... |
| CVE-2020-8329 | HIGH | 7.5 | 1.5% | May 28, 2020 | A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN tha... |
| CVE-2020-4246 | HIGH | 7.1 | 1.4% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack w... |
| CVE-2020-4245 | HIGH | 7.5 | 1.2% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by defa... |
| CVE-2020-4232 | HIGH | 7.5 | 1.1% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid log... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now