2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-2008 | HIGH | 7.2 | 2.8% | May 13, 2020 | An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated... |
| CVE-2020-2007 | HIGH | 7.2 | 2.2% | May 13, 2020 | An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to poten... |
| CVE-2020-2006 | HIGH | 8.8 | 1.9% | May 13, 2020 | A stack-based buffer overflow vulnerability in the management server component of PAN-OS that allows an authenticated us... |
| CVE-2020-2002 | HIGH | 8.1 | 1.3% | May 13, 2020 | An authentication bypass by spoofing vulnerability exists in the authentication daemon and User-ID components of Palo Al... |
| CVE-2020-1998 | HIGH | 8.8 | 0.9% | May 13, 2020 | An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of t... |
| CVE-2020-1714 | HIGH | 8.8 | 2.6% | May 13, 2020 | A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without typ... |
| CVE-2020-11073 | HIGH | 7.8 | 0.5% | May 13, 2020 | In Autoswitch Python Virtualenv before version 0.16.0, a user who enters a directory with a malicious `.venv` file could... |
| CVE-2020-5407 | HIGH | 8.8 | 1.2% | May 13, 2020 | Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2 contain a signature wrapping vulnerability during... |
| CVE-2020-12427 | HIGH | 8.8 | 0.5% | May 13, 2020 | The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF,... |
| CVE-2020-3341 | HIGH | 7.5 | 3.4% | May 13, 2020 | A vulnerability in the PDF archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.101 - 0.102.2 could all... |
| CVE-2020-3327 | HIGH | 7.5 | 5.1% | May 13, 2020 | A vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2 could allow an un... |
| CVE-2020-1718 | HIGH | 8.8 | 1.0% | May 12, 2020 | A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gai... |
| CVE-2020-11057 | HIGH | 8.8 | 2.2% | May 12, 2020 | In XWiki Platform 7.2 through 11.10.2, registered users without scripting/programming permissions are able to execute py... |
| CVE-2020-12772 | HIGH | 8.8 | 1.7% | May 12, 2020 | An issue was discovered in Ignite Realtime Spark 2.8.3 (and the ROAR plugin for it) on Windows. A chat message can inclu... |
| CVE-2020-11060 | HIGH | 8.8 | 10.9% | May 12, 2020 | In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality. Theoretically, this v... |
| CVE-2020-6262 | HIGH | 8.8 | 1.2% | May 12, 2020 | Service Data Download in SAP Application Server ABAP (ST-PI, before versions 2008_1_46C, 2008_1_620, 2008_1_640, 2008_1_... |
| CVE-2020-6253 | HIGH | 7.2 | 1.2% | May 12, 2020 | Under certain conditions, SAP Adaptive Server Enterprise (Web Services), versions 15.7, 16.0, allows an authenticated us... |
| CVE-2020-6252 | HIGH | 8 | 0.5% | May 12, 2020 | Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to local... |
| CVE-2020-6249 | HIGH | 8.8 | 1.0% | May 12, 2020 | The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS... |
| CVE-2020-6248 | HIGH | 7.2 | 1.9% | May 12, 2020 | SAP Adaptive Server Enterprise (Backup Server), version 16.0, does not perform the necessary validation checks for an au... |
| CVE-2020-6247 | HIGH | 7.5 | 1.0% | May 12, 2020 | SAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated attacker to prevent legitima... |
| CVE-2020-6244 | HIGH | 7.8 | 0.3% | May 12, 2020 | SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious co... |
| CVE-2020-6243 | HIGH | 8.8 | 0.9% | May 12, 2020 | Under certain conditions, SAP Adaptive Server Enterprise (XP Server on Windows Platform), versions 15.7, 16.0, does not ... |
| CVE-2020-6241 | HIGH | 8.8 | 1.0% | May 12, 2020 | SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevat... |
| CVE-2020-6240 | HIGH | 7.5 | 1.4% | May 12, 2020 | SAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700, 710, 730, 731, 804) allo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now