2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12026 | HIGH | 8.8 | 2.3% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist... |
| CVE-2020-12018 | HIGH | 7.5 | 1.5% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow a... |
| CVE-2020-12014 | HIGH | 7.5 | 1.5% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Input is not properly sanitized and may allow an attac... |
| CVE-2020-12010 | HIGH | 7.1 | 1.0% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist... |
| CVE-2020-12719 | HIGH | 7.2 | 1.0% | May 8, 2020 | XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager A... |
| CVE-2020-10916 | HIGH | 8 | 1.1% | May 7, 2020 | This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA85... |
| CVE-2020-9475 | HIGH | 7 | 0.3% | May 7, 2020 | The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in log... |
| CVE-2020-9474 | HIGH | 8.8 | 1.9% | May 7, 2020 | The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in ... |
| CVE-2020-11050 | HIGH | 8.1 | 0.8% | May 7, 2020 | In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where W... |
| CVE-2020-10795 | HIGH | 7.2 | 3.8% | May 7, 2020 | Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web... |
| CVE-2020-12116 | HIGH | 7.5 | 97.4% | May 7, 2020 | Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attack... |
| CVE-2020-7803 | HIGH | 8.8 | 1.2% | May 7, 2020 | IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donw... |
| CVE-2020-10974 | HIGH | 7.5 | 1.7% | May 7, 2020 | An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the... |
| CVE-2020-10973 | HIGH | 7.5 | 7.8% | May 7, 2020 | An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/Ex... |
| CVE-2020-10972 | HIGH | 7.5 | 1.7% | May 7, 2020 | An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source c... |
| CVE-2020-10971 | HIGH | 8.8 | 2.7% | May 7, 2020 | An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will resul... |
| CVE-2020-5745 | HIGH | 7.4 | 0.8% | May 7, 2020 | Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by trickin... |
| CVE-2020-12608 | HIGH | 7.8 | 22.4% | May 7, 2020 | An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Moni... |
| CVE-2020-6652 | HIGH | 7.8 | 0.4% | May 7, 2020 | Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin us... |
| CVE-2020-6651 | HIGH | 7.3 | 2.1% | May 7, 2020 | Improper Input Validation in Eaton's Intelligent Power Manager (IPM) v 1.67 & prior on file name during configuration fi... |
| CVE-2020-8983 | HIGH | 7.5 | 4.5% | May 7, 2020 | An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, in... |
| CVE-2020-8982 | HIGH | 7.5 | 27.1% | May 7, 2020 | An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones)... |
| CVE-2020-7473 | HIGH | 7.5 | 14.3% | May 7, 2020 | In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most ... |
| CVE-2020-6081 | HIGH | 8.8 | 1.8% | May 7, 2020 | An exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart Software Solutions GmbH COD... |
| CVE-2020-5895 | HIGH | 7.8 | 0.3% | May 7, 2020 | On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which a... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now