2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5864 | HIGH | 7.4 | 1.0% | Apr 23, 2020 | In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS... |
| CVE-2020-12112 | HIGH | 7.5 | 5.3% | Apr 23, 2020 | BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion. |
| CVE-2020-4311 | HIGH | 7 | 0.3% | Apr 23, 2020 | IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially... |
| CVE-2020-4202 | HIGH | 8.8 | 1.0% | Apr 23, 2020 | IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the serv... |
| CVE-2020-11940 | HIGH | 7.5 | 1.3% | Apr 23, 2020 | In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positione... |
| CVE-2020-5571 | HIGH | 7.5 | 1.2% | Apr 23, 2020 | SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQU... |
| CVE-2020-12077 | HIGH | 8.8 | 5.6% | Apr 23, 2020 | The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions wi... |
| CVE-2020-12076 | HIGH | 8.8 | 0.7% | Apr 23, 2020 | The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One ... |
| CVE-2020-12075 | HIGH | 8.8 | 1.0% | Apr 23, 2020 | The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions. |
| CVE-2020-12074 | HIGH | 8.8 | 1.7% | Apr 23, 2020 | The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import admi... |
| CVE-2020-12073 | HIGH | 8.8 | 1.6% | Apr 23, 2020 | The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action... |
| CVE-2020-7350 | HIGH | 7.8 | 4.9% | Apr 22, 2020 | Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the... |
| CVE-2020-8867 | HIGH | 7.5 | 2.6% | Apr 22, 2020 | This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foun... |
| CVE-2020-10913 | HIGH | 7.8 | 6.6% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10912 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10911 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10910 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10909 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10908 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10907 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.295... |
| CVE-2020-10906 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.295... |
| CVE-2020-10904 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10902 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10900 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.295... |
| CVE-2020-10899 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.295... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now