2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11706 | HIGH | 8.8 | 0.5% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such ... |
| CVE-2020-11703 | HIGH | 7.5 | 0.9% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response... |
| CVE-2020-11701 | HIGH | 8.8 | 0.5% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonst... |
| CVE-2020-11694 | HIGH | 7.5 | 1.8% | Apr 10, 2020 | In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed... |
| CVE-2020-11647 | HIGH | 7.5 | 3.3% | Apr 10, 2020 | In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed i... |
| CVE-2020-6765 | HIGH | 7.2 | 1.2% | Apr 10, 2020 | D-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a suppo... |
| CVE-2020-5330 | HIGH | 7.5 | 12.9% | Apr 10, 2020 | Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22 ... |
| CVE-2020-11002 | HIGH | 8.8 | 5.2% | Apr 10, 2020 | dropwizard-validation before versions 2.0.3 and 1.3.21 has a remote code execution vulnerability. A server-side template... |
| CVE-2020-4362 | HIGH | 8.8 | 2.4% | Apr 10, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerabilit... |
| CVE-2020-11668 | HIGH | 7.1 | 0.5% | Apr 9, 2020 | In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles i... |
| CVE-2020-1895 | HIGH | 7.8 | 0.9% | Apr 9, 2020 | A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dim... |
| CVE-2020-9499 | HIGH | 7.2 | 1.5% | Apr 9, 2020 | Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker ... |
| CVE-2020-10629 | HIGH | 7.5 | 1.2% | Apr 9, 2020 | WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker... |
| CVE-2020-10617 | HIGH | 7.5 | 1.3% | Apr 9, 2020 | There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.... |
| CVE-2020-10603 | HIGH | 8.8 | 1.2% | Apr 9, 2020 | WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system... |
| CVE-2020-11557 | HIGH | 7.5 | 0.7% | Apr 9, 2020 | An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the username and password va... |
| CVE-2020-11555 | HIGH | 7.5 | 1.4% | Apr 9, 2020 | An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sen... |
| CVE-2020-11554 | HIGH | 7.5 | 1.5% | Apr 9, 2020 | An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sen... |
| CVE-2020-11553 | HIGH | 8.8 | 0.5% | Apr 9, 2020 | An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF. |
| CVE-2020-10551 | HIGH | 7.8 | 1.4% | Apr 9, 2020 | QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to th... |
| CVE-2020-11655 | HIGH | 7.5 | 4.3% | Apr 9, 2020 | SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function... |
| CVE-2020-11653 | HIGH | 7.5 | 2.1% | Apr 8, 2020 | An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occu... |
| CVE-2020-11650 | HIGH | 7.5 | 3.0% | Apr 8, 2020 | An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a deni... |
| CVE-2020-8828 | HIGH | 8.8 | 1.8% | Apr 8, 2020 | As of v1.5.0, the default admin password is set to the argocd-server pod name. For insiders with access to the cluster o... |
| CVE-2020-8827 | HIGH | 7.5 | 2.2% | Apr 8, 2020 | As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now