2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10898 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10897 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10896 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10895 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10893 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10892 | HIGH | 8.8 | 2.2% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10891 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10890 | HIGH | 8.8 | 2.2% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10889 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-11506 | HIGH | 7.5 | 1.2% | Apr 22, 2020 | An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact uploads... |
| CVE-2020-11505 | HIGH | 7.5 | 1.2% | Apr 22, 2020 | An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9... |
| CVE-2020-7490 | HIGH | 7.8 | 0.4% | Apr 22, 2020 | A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Desig... |
| CVE-2020-7488 | HIGH | 7.5 | 0.8% | Apr 22, 2020 | A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information t... |
| CVE-2020-12066 | HIGH | 7.5 | 3.0% | Apr 22, 2020 | CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the se... |
| CVE-2020-11011 | HIGH | 8.8 | 1.9% | Apr 22, 2020 | In Phproject before version 1.7.8, there's a vulnerability which allows users with access to file uploads to execute arb... |
| CVE-2020-5740 | HIGH | 7.8 | 0.7% | Apr 22, 2020 | Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary ... |
| CVE-2020-10712 | HIGH | 8.2 | 1.0% | Apr 22, 2020 | A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by ... |
| CVE-2020-8477 | HIGH | 8.8 | 1.7% | Apr 22, 2020 | The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxil... |
| CVE-2020-8474 | HIGH | 7.8 | 0.3% | Apr 22, 2020 | Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings relat... |
| CVE-2020-11795 | HIGH | 7.5 | 0.8% | Apr 22, 2020 | In JetBrains Space through 2020-04-22, the session timeout period was configured improperly. |
| CVE-2020-11693 | HIGH | 7.5 | 1.7% | Apr 22, 2020 | JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an... |
| CVE-2020-11691 | HIGH | 7.5 | 0.9% | Apr 22, 2020 | In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible. |
| CVE-2020-11688 | HIGH | 7.5 | 1.0% | Apr 22, 2020 | In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session. |
| CVE-2020-11687 | HIGH | 7.5 | 1.1% | Apr 22, 2020 | In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages. |
| CVE-2020-11685 | HIGH | 7.5 | 0.9% | Apr 22, 2020 | In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now