2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13482 | HIGH | 7.4 | 0.9% | May 25, 2020 | EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-m... |
| CVE-2020-13458 | HIGH | 8.8 | 0.5% | May 25, 2020 | An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear... |
| CVE-2020-13425 | HIGH | 7.1 | 0.6% | May 23, 2020 | TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a... |
| CVE-2020-13415 | HIGH | 7.5 | 0.7% | May 22, 2020 | An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity... |
| CVE-2020-13414 | HIGH | 7.5 | 1.5% | May 22, 2020 | An issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by the software. |
| CVE-2020-13412 | HIGH | 8.8 | 0.6% | May 22, 2020 | An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token ... |
| CVE-2020-13398 | HIGH | 8.3 | 2.4% | May 22, 2020 | An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_... |
| CVE-2020-13396 | HIGH | 7.1 | 2.4% | May 22, 2020 | An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_rea... |
| CVE-2020-11077 | HIGH | 7.5 | 2.8% | May 22, 2020 | In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a... |
| CVE-2020-11076 | HIGH | 7.5 | 4.1% | May 22, 2020 | In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-enco... |
| CVE-2020-1956 | HIGH | 8.8 | 98.0% | May 22, 2020 | Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the ... |
| CVE-2020-3272 | HIGH | 7.5 | 1.5% | May 22, 2020 | A vulnerability in the DHCP server of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to c... |
| CVE-2020-3184 | HIGH | 7.2 | 0.9% | May 22, 2020 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an ... |
| CVE-2020-13384 | HIGH | 8.8 | 2.5% | May 22, 2020 | Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/index.php?id=file... |
| CVE-2020-1192 | HIGH | 7.8 | 11.7% | May 21, 2020 | A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings fr... |
| CVE-2020-1191 | HIGH | 7.8 | 1.5% | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m... |
| CVE-2020-1190 | HIGH | 7.8 | 0.7% | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m... |
| CVE-2020-1189 | HIGH | 7.8 | 0.7% | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m... |
| CVE-2020-1188 | HIGH | 7.8 | 0.7% | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m... |
| CVE-2020-1187 | HIGH | 7.8 | 0.7% | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m... |
| CVE-2020-1186 | HIGH | 7.8 | 0.7% | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m... |
| CVE-2020-1185 | HIGH | 7.8 | 0.7% | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m... |
| CVE-2020-1184 | HIGH | 7.8 | 0.7% | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m... |
| CVE-2020-1176 | HIGH | 7.8 | 10.9% | May 21, 2020 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. ... |
| CVE-2020-1175 | HIGH | 7.8 | 10.9% | May 21, 2020 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now