2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10876 | HIGH | 7.5 | 1.1% | May 4, 2020 | The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) does not correctly implement its tim... |
| CVE-2020-10187 | HIGH | 7.5 | 2.0% | May 4, 2020 | Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve ... |
| CVE-2020-11842 | HIGH | 7.5 | 1.1% | May 4, 2020 | Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versions earlier... |
| CVE-2020-8018 | HIGH | 7.8 | 0.3% | May 4, 2020 | A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of ... |
| CVE-2020-7351 | HIGH | 8.8 | 65.2% | May 1, 2020 | An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allo... |
| CVE-2020-11028 | HIGH | 7.5 | 2.3% | Apr 30, 2020 | In affected versions of WordPress, some private posts, which were previously public, can result in unauthenticated discl... |
| CVE-2020-11027 | HIGH | 8.1 | 13.6% | Apr 30, 2020 | In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user passwo... |
| CVE-2020-11016 | HIGH | 8.8 | 2.3% | Apr 30, 2020 | IntelMQ Manager from version 1.1.0 and before version 2.1.1 has a vulnerability where the backend incorrectly handled me... |
| CVE-2020-9098 | HIGH | 7.5 | 0.8% | Apr 30, 2020 | Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The softwar... |
| CVE-2020-5888 | HIGH | 8.1 | 0.6% | Apr 30, 2020 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism fo... |
| CVE-2020-1817 | HIGH | 7.8 | 0.2% | Apr 30, 2020 | Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation vulnerability. Due to improper permissi... |
| CVE-2020-5891 | HIGH | 7.5 | 1.2% | Apr 30, 2020 | On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, undisclosed HTTP/2 requests can lead to a denial of ser... |
| CVE-2020-5883 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, when a virtual server is configured with H... |
| CVE-2020-5882 | HIGH | 7.5 | 1.0% | Apr 30, 2020 | On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5, and 11.6.1-11.6.5.1, under certain condition... |
| CVE-2020-5881 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition (VE) is configured wi... |
| CVE-2020-5880 | HIGH | 7.1 | 1.3% | Apr 30, 2020 | Om BIG-IP 15.0.0-15.0.1.3 and 14.1.0-14.1.2.3, the restjavad process may expose a way for attackers to upload arbitrary ... |
| CVE-2020-5879 | HIGH | 7.5 | 0.8% | Apr 30, 2020 | On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end serv... |
| CVE-2020-5878 | HIGH | 7.5 | 1.0% | Apr 30, 2020 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel (TMM) may restart on B... |
| CVE-2020-5877 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On BIG-IP 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, malformed input to th... |
| CVE-2020-5876 | HIGH | 8.1 | 0.6% | Apr 30, 2020 | On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exis... |
| CVE-2020-5875 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel (TMM) may gene... |
| CVE-2020-5874 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On BIG-IP APM 15.0.0-15.0.1.2, 14.1.0-14.1.2.3, and 14.0.0-14.0.1, in certain circumstances, an attacker sending specifi... |
| CVE-2020-5873 | HIGH | 7.2 | 1.4% | Apr 30, 2020 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a us... |
| CVE-2020-5872 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardwar... |
| CVE-2020-5871 | HIGH | 7.5 | 1.0% | Apr 30, 2020 | On BIG-IP 14.1.0-14.1.2.3, undisclosed requests can lead to a denial of service (DoS) when sent to BIG-IP HTTP/2 virtual... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now