2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1773 | HIGH | 8.1 | 1.5% | Mar 27, 2020 | An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or b... |
| CVE-2020-1772 | HIGH | 7.5 | 1.6% | Mar 27, 2020 | It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid... |
| CVE-2020-10508 | HIGH | 7.5 | 1.5% | Mar 27, 2020 | Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a spe... |
| CVE-2020-3921 | HIGH | 7.5 | 0.7% | Mar 27, 2020 | UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts informa... |
| CVE-2020-3920 | HIGH | 8.1 | 0.8% | Mar 27, 2020 | UltraLog Express device management interface does not properly perform access authentication in some specific pages/func... |
| CVE-2020-9521 | HIGH | 8.8 | 1.1% | Mar 26, 2020 | An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.0... |
| CVE-2020-9066 | HIGH | 7.8 | 0.6% | Mar 26, 2020 | Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vuln... |
| CVE-2020-7944 | HIGH | 7.7 | 0.9% | Mar 26, 2020 | In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive ... |
| CVE-2020-1800 | HIGH | 7.8 | 0.5% | Mar 26, 2020 | HUAWEI smartphones P30 with versions earlier than 10.0.0.185(C00E85R1P11) have an improper access control vulnerability.... |
| CVE-2020-4276 | HIGH | 7.5 | 3.1% | Mar 26, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerabilit... |
| CVE-2020-7260 | HIGH | 7.8 | 0.4% | Mar 26, 2020 | DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows loc... |
| CVE-2020-5129 | HIGH | 7.5 | 1.3% | Mar 26, 2020 | A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP se... |
| CVE-2020-1764 | HIGH | 8.6 | 3.5% | Mar 26, 2020 | A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to... |
| CVE-2020-10969 | HIGH | 8.8 | 3.6% | Mar 26, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-10968 | HIGH | 8.8 | 3.6% | Mar 26, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-10965 | HIGH | 8.1 | 1.4% | Mar 25, 2020 | Teradici PCoIP Management Console 20.01.0 and 19.11.1 is vulnerable to unauthenticated password resets via login/resetad... |
| CVE-2020-6811 | HIGH | 8.8 | 3.2% | Mar 25, 2020 | The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be c... |
| CVE-2020-6809 | HIGH | 7.5 | 1.4% | Mar 25, 2020 | When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possi... |
| CVE-2020-6807 | HIGH | 8.8 | 1.2% | Mar 25, 2020 | When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been ex... |
| CVE-2020-6806 | HIGH | 8.8 | 2.5% | Mar 25, 2020 | By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resize... |
| CVE-2020-6805 | HIGH | 8.8 | 1.3% | Mar 25, 2020 | When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, res... |
| CVE-2020-10963 | HIGH | 7.2 | 14.7% | Mar 25, 2020 | FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution)... |
| CVE-2020-3790 | HIGH | 8.8 | 3.6% | Mar 25, 2020 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corrupti... |
| CVE-2020-3780 | HIGH | 8.8 | 4.5% | Mar 25, 2020 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors v... |
| CVE-2020-3779 | HIGH | 8.8 | 3.9% | Mar 25, 2020 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now