2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8826 | HIGH | 7.5 | 1.7% | Apr 8, 2020 | As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, ... |
| CVE-2020-1885 | HIGH | 7.8 | 0.4% | Apr 8, 2020 | Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows ... |
| CVE-2020-1639 | HIGH | 7.5 | 1.1% | Apr 8, 2020 | When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance (Ethernet OAM) packet to a... |
| CVE-2020-1638 | HIGH | 7.5 | 1.3% | Apr 8, 2020 | The FPC (Flexible PIC Concentrator) of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a spe... |
| CVE-2020-1634 | HIGH | 7.5 | 1.4% | Apr 8, 2020 | On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur... |
| CVE-2020-1627 | HIGH | 7.5 | 1.3% | Apr 8, 2020 | A vulnerability in Juniper Networks Junos OS on vMX and MX150 devices may allow an attacker to cause a Denial of Service... |
| CVE-2020-1626 | HIGH | 7.5 | 1.3% | Apr 8, 2020 | A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending... |
| CVE-2020-1617 | HIGH | 7.5 | 1.6% | Apr 8, 2020 | This issue occurs on Juniper Networks Junos OS devices which do not support Advanced Forwarding Interface (AFI) / Advanc... |
| CVE-2020-1613 | HIGH | 7.5 | 1.3% | Apr 8, 2020 | A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an establis... |
| CVE-2020-1991 | HIGH | 7.1 | 0.3% | Apr 8, 2020 | An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escala... |
| CVE-2020-1990 | HIGH | 7.2 | 2.1% | Apr 8, 2020 | A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to... |
| CVE-2020-1989 | HIGH | 7.8 | 0.3% | Apr 8, 2020 | An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global... |
| CVE-2020-1985 | HIGH | 7.8 | 0.3% | Apr 8, 2020 | Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite... |
| CVE-2020-1984 | HIGH | 7.8 | 0.3% | Apr 8, 2020 | Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create fol... |
| CVE-2020-10976 | HIGH | 7.5 | 1.2% | Apr 8, 2020 | GitLab EE/CE 8.17 to 12.9 is vulnerable to information leakage when querying a merge request widget. |
| CVE-2020-11605 | HIGH | 7.5 | 0.4% | Apr 8, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. There is sensitive informat... |
| CVE-2020-5735 | HIGH | 8.8 | 35.6% | Apr 8, 2020 | Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacke... |
| CVE-2020-5550 | HIGH | 8.1 | 1.9% | Apr 8, 2020 | Session fixation vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier, and Enterprise Ver. 2.0.1 and earlier allows r... |
| CVE-2020-5549 | HIGH | 8.8 | 0.9% | Apr 8, 2020 | Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and Enterprise Ver. 2.0.1 and ... |
| CVE-2020-11629 | HIGH | 7.2 | 0.6% | Apr 8, 2020 | An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. The External Command Certificate Validator, whi... |
| CVE-2020-11627 | HIGH | 8.8 | 0.5% | Apr 8, 2020 | An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. A Cross Site Request Forgery (CSRF) issue has b... |
| CVE-2020-10366 | HIGH | 7.5 | 1.5% | Apr 8, 2020 | LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-... |
| CVE-2020-11620 | HIGH | 8.1 | 5.8% | Apr 7, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-11619 | HIGH | 8.1 | 3.7% | Apr 7, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-11612 | HIGH | 7.5 | 9.4% | Apr 7, 2020 | The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte st... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now