2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10700 | MEDIUM | 5.3 | 2.0% | May 4, 2020 | A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with th... |
| CVE-2020-10686 | MEDIUM | 4.7 | 0.7% | May 4, 2020 | A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user re... |
| CVE-2020-8896 | MEDIUM | 5.9 | 0.4% | May 4, 2020 | A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 all... |
| CVE-2020-5337 | MEDIUM | 6.1 | 0.8% | May 4, 2020 | RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability. A remote unauthenticated attack... |
| CVE-2020-5336 | MEDIUM | 6.1 | 0.7% | May 4, 2020 | RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability. An unauthenticated attacker could... |
| CVE-2020-5334 | MEDIUM | 6.1 | 0.9% | May 4, 2020 | RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting vulner... |
| CVE-2020-5333 | MEDIUM | 4.3 | 0.8% | May 4, 2020 | RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API. A remote ... |
| CVE-2020-5331 | MEDIUM | 5.5 | 0.7% | May 4, 2020 | RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability. Users’ session informatio... |
| CVE-2020-10618 | MEDIUM | 5.5 | 0.8% | May 4, 2020 | LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unau... |
| CVE-2020-1732 | MEDIUM | 4.2 | 0.7% | May 4, 2020 | A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identi... |
| CVE-2020-10933 | MEDIUM | 5.3 | 2.6% | May 4, 2020 | An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_... |
| CVE-2020-8792 | MEDIUM | 5.3 | 1.0% | May 4, 2020 | The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has an information-exposure issue. I... |
| CVE-2020-8791 | MEDIUM | 6.5 | 1.0% | May 4, 2020 | The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) allows remote attackers to submit AP... |
| CVE-2020-4209 | MEDIUM | 5.4 | 1.4% | May 4, 2020 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An ... |
| CVE-2020-12639 | MEDIUM | 6.1 | 0.7% | May 4, 2020 | phpList before 3.5.3 allows XSS, with resultant privilege elevation, via lists/admin/template.php. |
| CVE-2020-12475 | MEDIUM | 5.5 | 0.6% | May 4, 2020 | TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tp_link.eap.web.p... |
| CVE-2020-12629 | MEDIUM | 5.4 | 1.5% | May 4, 2020 | include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name. |
| CVE-2020-12114 | MEDIUM | 4.7 | 0.4% | May 4, 2020 | A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x bef... |
| CVE-2020-12626 | MEDIUM | 6.5 | 1.8% | May 4, 2020 | An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged ou... |
| CVE-2020-12625 | MEDIUM | 6.1 | 2.8% | May 4, 2020 | An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_... |
| CVE-2020-12624 | MEDIUM | 6.5 | 1.3% | May 3, 2020 | The League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization header to an arbitrary... |
| CVE-2020-8157 | MEDIUM | 6.8 | 0.3% | May 2, 2020 | UniFi Cloud Key firmware <= v1.1.10 for Cloud Key gen2 and Cloud Key gen2 Plus contains a vulnerability that allows unre... |
| CVE-2020-5727 | MEDIUM | 4.6 | 0.4% | May 2, 2020 | Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated ... |
| CVE-2020-12474 | MEDIUM | 6.5 | 2.5% | May 1, 2020 | Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homo... |
| CVE-2020-12117 | MEDIUM | 5.3 | 1.4% | May 1, 2020 | Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration val... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now