2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3329 | MEDIUM | 4.3 | 0.7% | May 6, 2020 | A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Direc... |
| CVE-2020-3315 | MEDIUM | 5.3 | 2.2% | May 6, 2020 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticate... |
| CVE-2020-3313 | MEDIUM | 6.1 | 0.8% | May 6, 2020 | A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote... |
| CVE-2020-3311 | MEDIUM | 6.1 | 0.8% | May 6, 2020 | A vulnerability in the web interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated,... |
| CVE-2020-3310 | MEDIUM | 4.9 | 1.2% | May 6, 2020 | A vulnerability in the XML parser code of Cisco Firepower Device Manager On-Box software could allow an authenticated, r... |
| CVE-2020-3308 | MEDIUM | 4.9 | 0.6% | May 6, 2020 | A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow... |
| CVE-2020-3307 | MEDIUM | 5.3 | 1.0% | May 6, 2020 | A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote... |
| CVE-2020-3301 | MEDIUM | 4.4 | 0.8% | May 6, 2020 | Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software cou... |
| CVE-2020-3285 | MEDIUM | 5.8 | 1.4% | May 6, 2020 | A vulnerability in the Transport Layer Security version 1.3 (TLS 1.3) policy with URL category functionality for Cisco F... |
| CVE-2020-3256 | MEDIUM | 4.9 | 1.2% | May 6, 2020 | A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) Softwa... |
| CVE-2020-3253 | MEDIUM | 6.7 | 0.3% | May 6, 2020 | A vulnerability in the support tunnel feature of Cisco Firepower Threat Defense (FTD) Software could allow an authentica... |
| CVE-2020-3246 | MEDIUM | 4.3 | 0.9% | May 6, 2020 | A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to perform a carriag... |
| CVE-2020-3188 | MEDIUM | 5.3 | 1.7% | May 6, 2020 | A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections... |
| CVE-2020-3186 | MEDIUM | 5.3 | 1.3% | May 6, 2020 | A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow... |
| CVE-2020-3178 | MEDIUM | 6.1 | 0.8% | May 6, 2020 | Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance ... |
| CVE-2020-7921 | MEDIUM | 5.3 | 0.7% | May 6, 2020 | Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem perm... |
| CVE-2020-12108 | MEDIUM | 6.5 | 2.7% | May 6, 2020 | /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. |
| CVE-2020-6861 | MEDIUM | 5.5 | 0.4% | May 6, 2020 | A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attac... |
| CVE-2020-4446 | MEDIUM | 4.3 | 0.9% | May 6, 2020 | IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote a... |
| CVE-2020-4421 | MEDIUM | 5.4 | 0.7% | May 6, 2020 | IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spo... |
| CVE-2020-4384 | MEDIUM | 5.4 | 0.6% | May 6, 2020 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows ... |
| CVE-2020-10693 | MEDIUM | 5.3 | 2.3% | May 6, 2020 | A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invali... |
| CVE-2020-4092 | MEDIUM | 5.3 | 0.3% | May 6, 2020 | "If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clea... |
| CVE-2020-2188 | MEDIUM | 4.3 | 0.6% | May 6, 2020 | A missing permission check in Jenkins Amazon EC2 Plugin 1.50.1 and earlier in form-related methods allowed users with Ov... |
| CVE-2020-2187 | MEDIUM | 5.6 | 0.4% | May 6, 2020 | Jenkins Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed certificates and does not perform hostn... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now