2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11539 | HIGH | 8.1 | 1.0% | Apr 22, 2020 | An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pai... |
| CVE-2020-12059 | HIGH | 7.5 | 2.7% | Apr 22, 2020 | An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by ... |
| CVE-2020-12051 | HIGH | 7.5 | 1.3% | Apr 21, 2020 | The CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain sensitive hidden account infor... |
| CVE-2020-11008 | HIGH | 7.5 | 3.9% | Apr 21, 2020 | Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host cont... |
| CVE-2020-8895 | HIGH | 7.8 | 0.2% | Apr 21, 2020 | Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attac... |
| CVE-2020-5268 | HIGH | 7.3 | 1.1% | Apr 21, 2020 | In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerabilit... |
| CVE-2020-1757 | HIGH | 8.1 | 1.6% | Apr 21, 2020 | A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x ... |
| CVE-2020-1699 | HIGH | 7.5 | 2.1% | Apr 21, 2020 | A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph... |
| CVE-2020-10787 | HIGH | 8.8 | 2.5% | Apr 21, 2020 | An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the... |
| CVE-2020-10786 | HIGH | 8.8 | 4.8% | Apr 21, 2020 | A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary co... |
| CVE-2020-1967 | HIGH | 7.5 | 53.3% | Apr 21, 2020 | Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due... |
| CVE-2020-11828 | HIGH | 7.5 | 1.2% | Apr 21, 2020 | In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger su... |
| CVE-2020-11968 | HIGH | 7.5 | 2.6% | Apr 21, 2020 | In the web-panel in IQrouter through 3.3.1, remote attackers can read system logs because of Incorrect Access Control. N... |
| CVE-2020-11964 | HIGH | 7.5 | 2.2% | Apr 21, 2020 | In IQrouter through 3.3.1, the Lua function diag_set_password in the web-panel allows remote attackers to change the roo... |
| CVE-2020-11958 | HIGH | 7.8 | 1.7% | Apr 21, 2020 | re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme. |
| CVE-2020-9276 | HIGH | 8.8 | 2.6% | Apr 20, 2020 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The function do_cgi(), which processes cgi requests sup... |
| CVE-2020-11010 | HIGH | 8.8 | 1.0% | Apr 20, 2020 | In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when fi... |
| CVE-2020-11946 | HIGH | 7.5 | 51.8% | Apr 20, 2020 | Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call. |
| CVE-2020-3946 | HIGH | 7.5 | 1.0% | Apr 20, 2020 | InstallBuilder AutoUpdate tool and regular installers enabling <checkForUpdates> built with versions earlier than 19.11 ... |
| CVE-2020-11753 | HIGH | 8.8 | 1.7% | Apr 20, 2020 | An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user wi... |
| CVE-2020-5569 | HIGH | 8.4 | 0.3% | Apr 20, 2020 | An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is s... |
| CVE-2020-11886 | HIGH | 8.1 | 1.4% | Apr 17, 2020 | OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or s... |
| CVE-2020-11885 | HIGH | 7.2 | 0.8% | Apr 17, 2020 | WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the X... |
| CVE-2020-1751 | HIGH | 7 | 0.5% | Apr 17, 2020 | An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifi... |
| CVE-2020-0082 | HIGH | 7.8 | 0.4% | Apr 17, 2020 | In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe dese... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now