2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6076 | HIGH | 8.8 | 3.6% | May 6, 2020 | An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser of the Accusoft ImageGea... |
| CVE-2020-6075 | HIGH | 8.8 | 3.6% | May 6, 2020 | An exploitable out-of-bounds write vulnerability exists in the store_data_buffer function of the igcore19d.dll library o... |
| CVE-2020-2189 | HIGH | 8.8 | 2.3% | May 6, 2020 | Jenkins SCM Filter Jervis Plugin 0.2.1 and earlier does not configure its YAML parser to prevent the instantiation of ar... |
| CVE-2020-12672 | HIGH | 7.5 | 2.9% | May 6, 2020 | GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c. |
| CVE-2020-12463 | HIGH | 7.8 | 0.4% | May 5, 2020 | An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling f... |
| CVE-2020-11033 | HIGH | 7.2 | 1.0% | May 5, 2020 | In GLPI from version 9.1 and before version 9.4.6, any API user with READ right on User itemtype will have access to ful... |
| CVE-2020-11032 | HIGH | 7.2 | 1.0% | May 5, 2020 | In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnera... |
| CVE-2020-8830 | HIGH | 8.8 | 0.5% | May 5, 2020 | CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other an... |
| CVE-2020-8829 | HIGH | 8.8 | 0.5% | May 5, 2020 | CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis. |
| CVE-2020-7983 | HIGH | 8.1 | 0.6% | May 5, 2020 | A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF... |
| CVE-2020-12104 | HIGH | 8.8 | 1.6% | May 5, 2020 | The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via... |
| CVE-2020-12657 | HIGH | 7.8 | 0.7% | May 5, 2020 | An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bf... |
| CVE-2020-12653 | HIGH | 7.8 | 0.4% | May 5, 2020 | An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marv... |
| CVE-2020-12654 | HIGH | 7.1 | 1.2% | May 5, 2020 | An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wm... |
| CVE-2020-12649 | HIGH | 7.5 | 1.6% | May 5, 2020 | Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths. |
| CVE-2020-5343 | HIGH | 7.8 | 0.3% | May 4, 2020 | Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecu... |
| CVE-2020-5335 | HIGH | 8.8 | 0.5% | May 4, 2020 | RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability. A remote unauthentic... |
| CVE-2020-5332 | HIGH | 7.2 | 2.2% | May 4, 2020 | RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability. AN authenticated malicious us... |
| CVE-2020-10622 | HIGH | 7.8 | 0.8% | May 4, 2020 | LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to arbitrary file creation by unauthorize... |
| CVE-2020-12642 | HIGH | 7.5 | 1.3% | May 4, 2020 | An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resulta... |
| CVE-2020-12109 | HIGH | 8.8 | 74.3% | May 4, 2020 | Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 ... |
| CVE-2020-12111 | HIGH | 8.8 | 8.0% | May 4, 2020 | Certain TP-Link devices allow Command Injection. This affects NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304. |
| CVE-2020-11671 | HIGH | 8.1 | 1.1% | May 4, 2020 | Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid... |
| CVE-2020-11462 | HIGH | 7.5 | 1.3% | May 4, 2020 | An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interf... |
| CVE-2020-11443 | HIGH | 8.1 | 1.5% | May 4, 2020 | The Zoom IT installer for Windows (ZoomInstallerFull.msi) prior to version 4.6.10 deletes files located in %APPDATA%\Zoo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now