2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-24658 | HIGH | 7.8 | 0.3% | Dec 24, 2020 | Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overfl... |
| CVE-2020-9202 | MEDIUM | 4.4 | 0.2% | Dec 24, 2020 | There is an information disclosure vulnerability in TE Mobile software versions V600R006C10,V600R006C10SPC100. Due to th... |
| CVE-2020-9201 | MEDIUM | 6.5 | 0.3% | Dec 24, 2020 | There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software re... |
| CVE-2020-9200 | HIGH | 7.8 | 0.3% | Dec 24, 2020 | There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege ... |
| CVE-2020-9137 | MEDIUM | 6.7 | 0.2% | Dec 24, 2020 | There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 an... |
| CVE-2020-9120 | HIGH | 7.5 | 0.7% | Dec 24, 2020 | CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attacker... |
| CVE-2020-9119 | MEDIUM | 6.2 | 0.2% | Dec 24, 2020 | There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to p... |
| CVE-2020-35680 | HIGH | 7.5 | 3.6% | Dec 24, 2020 | smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of ... |
| CVE-2020-35679 | HIGH | 7.5 | 2.8% | Dec 24, 2020 | smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very signif... |
| CVE-2020-35659 | MEDIUM | 6.1 | 0.9% | Dec 24, 2020 | The DNS query log in Pi-hole before 5.2.2 is vulnerable to stored XSS. An attacker with the ability to directly or indir... |
| CVE-2020-27729 | MEDIUM | 6.1 | 0.6% | Dec 24, 2020 | In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, an u... |
| CVE-2020-27728 | HIGH | 7.5 | 1.0% | Dec 24, 2020 | On BIG-IP ASM & Advanced WAF versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, under certain conditions, Ana... |
| CVE-2020-27727 | MEDIUM | 4.9 | 0.8% | Dec 24, 2020 | On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an authenticated administra... |
| CVE-2020-27726 | MEDIUM | 6.1 | 0.6% | Dec 24, 2020 | In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2, a reflected cross-sit... |
| CVE-2020-27723 | HIGH | 7.5 | 1.0% | Dec 24, 2020 | In versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4, a BIG-IP APM virtual server processing PingAccess requests may lead to a ... |
| CVE-2020-27722 | MEDIUM | 6.5 | 0.9% | Dec 24, 2020 | In BIG-IP APM versions 15.0.0-15.0.1.3, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, under certain conditions, the VDI plugin doe... |
| CVE-2020-27720 | HIGH | 7.5 | 1.4% | Dec 24, 2020 | On BIG-IP LTM/CGNAT version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when processing NAT66 ... |
| CVE-2020-27719 | MEDIUM | 6.1 | 0.6% | Dec 24, 2020 | On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting (XSS) vulnerability exists in an u... |
| CVE-2020-27717 | HIGH | 7.5 | 1.1% | Dec 24, 2020 | On BIG-IP DNS 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2, undisclosed series ... |
| CVE-2020-27716 | HIGH | 7.5 | 1.3% | Dec 24, 2020 | On versions 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when a BIG-IP APM vir... |
| CVE-2020-27715 | HIGH | 7.5 | 1.1% | Dec 24, 2020 | On BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3, crafted TLS request to the BIG-IP management interface via port 443 can cau... |
| CVE-2020-27714 | HIGH | 7.5 | 1.0% | Dec 24, 2020 | On the BIG-IP AFM version 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when a Protocol Inspection Profile is att... |
| CVE-2020-29189 | HIGH | 8.1 | 1.2% | Dec 24, 2020 | Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read... |
| CVE-2020-28190 | MEDIUM | 5.9 | 0.8% | Dec 24, 2020 | TerraMaster TOS <= 4.2.06 was found to check for updates (of both system and applications) via an insecure channel (HTTP... |
| CVE-2020-28189 | — | — | — | Dec 24, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-29189. Reason: This candidate is a reservation d... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now