2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13164 | HIGH | 7.5 | 3.2% | May 19, 2020 | In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in ... |
| CVE-2020-13163 | HIGH | 7.4 | 0.8% | May 19, 2020 | em-imap 0.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle atta... |
| CVE-2020-2025 | HIGH | 8.8 | 0.3% | May 19, 2020 | Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the ... |
| CVE-2020-11766 | HIGH | 8.8 | 1.8% | May 19, 2020 | sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command... |
| CVE-2020-10995 | HIGH | 7.5 | 4.4% | May 19, 2020 | PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An is... |
| CVE-2020-11807 | HIGH | 7.8 | 0.7% | May 19, 2020 | Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user... |
| CVE-2020-10030 | HIGH | 8.8 | 23.9% | May 19, 2020 | An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker (with enough privile... |
| CVE-2020-1695 | HIGH | 7.5 | 2.0% | May 19, 2020 | A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Fin... |
| CVE-2020-8616 | HIGH | 8.6 | 10.6% | May 19, 2020 | A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when p... |
| CVE-2020-4411 | HIGH | 7.1 | 0.3% | May 19, 2020 | The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of... |
| CVE-2020-12663 | HIGH | 7.5 | 3.6% | May 19, 2020 | Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers. |
| CVE-2020-12662 | HIGH | 7.5 | 3.2% | May 19, 2020 | Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered b... |
| CVE-2020-12244 | HIGH | 7.5 | 2.4% | May 19, 2020 | An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN respo... |
| CVE-2020-12667 | HIGH | 7.5 | 2.6% | May 19, 2020 | Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka... |
| CVE-2020-13149 | HIGH | 7.8 | 0.4% | May 18, 2020 | Weak permissions on the "%PROGRAMDATA%\MSI\Dragon Center" folder in Dragon Center before 2.6.2003.2401, shipped with Mic... |
| CVE-2020-13146 | HIGH | 8.8 | 1.1% | May 18, 2020 | Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course>Instructor>Cohorts may contain a ... |
| CVE-2020-13144 | HIGH | 8.8 | 11.0% | May 18, 2020 | Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course>New section>Ne... |
| CVE-2020-6092 | HIGH | 7.8 | 42.3% | May 18, 2020 | An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially c... |
| CVE-2020-6074 | HIGH | 8.8 | 40.9% | May 18, 2020 | An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF do... |
| CVE-2020-13136 | HIGH | 7.5 | 1.2% | May 18, 2020 | D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer. |
| CVE-2020-11551 | HIGH | 8.8 | 1.7% | May 18, 2020 | An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satel... |
| CVE-2020-11549 | HIGH | 8.8 | 4.1% | May 18, 2020 | An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satel... |
| CVE-2020-12255 | HIGH | 8.8 | 52.6% | May 18, 2020 | rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor... |
| CVE-2020-12257 | HIGH | 8.8 | 1.4% | May 18, 2020 | rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because it lacks implementation of CSRF protection such... |
| CVE-2020-10957 | HIGH | 7.5 | 7.2% | May 18, 2020 | In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dere... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now