2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-2165 | HIGH | 7.5 | 1.1% | Mar 25, 2020 | Jenkins Artifactory Plugin 3.6.0 and earlier transmits configured passwords in plain text as part of its global Jenkins ... |
| CVE-2020-2160 | HIGH | 8.8 | 2.0% | Mar 25, 2020 | Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows att... |
| CVE-2020-10649 | HIGH | 7.8 | 0.6% | Mar 25, 2020 | DevActSvc.exe in ASUS Device Activation before 1.0.7.0 for Windows 10 notebooks and PCs could lead to unsigned code exec... |
| CVE-2020-9375 | HIGH | 7.5 | 28.2% | Mar 25, 2020 | TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a ... |
| CVE-2020-5558 | HIGH | 8.8 | 2.1% | Mar 25, 2020 | CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors. |
| CVE-2020-8985 | HIGH | 8.8 | 0.5% | Mar 24, 2020 | ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality. |
| CVE-2020-8984 | HIGH | 7.5 | 0.5% | Mar 24, 2020 | lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header. |
| CVE-2020-7001 | HIGH | 7.5 | 0.8% | Mar 24, 2020 | In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which... |
| CVE-2020-6997 | HIGH | 7.5 | 0.8% | Mar 24, 2020 | In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications... |
| CVE-2020-6982 | HIGH | 8.8 | 1.1% | Mar 24, 2020 | In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may al... |
| CVE-2020-6979 | HIGH | 7.5 | 1.2% | Mar 24, 2020 | In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, incre... |
| CVE-2020-6978 | HIGH | 7.2 | 0.8% | Mar 24, 2020 | In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery li... |
| CVE-2020-6080 | HIGH | 7.5 | 2.4% | Mar 24, 2020 | An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0... |
| CVE-2020-6079 | HIGH | 7.5 | 3.1% | Mar 24, 2020 | An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0... |
| CVE-2020-6078 | HIGH | 7.5 | 3.1% | Mar 24, 2020 | An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.... |
| CVE-2020-6077 | HIGH | 7.5 | 2.5% | Mar 24, 2020 | An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.... |
| CVE-2020-6073 | HIGH | 7.5 | 2.5% | Mar 24, 2020 | An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0... |
| CVE-2020-6071 | HIGH | 7.5 | 2.5% | Mar 24, 2020 | An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicro... |
| CVE-2020-7005 | HIGH | 8.8 | 0.9% | Mar 24, 2020 | In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, ... |
| CVE-2020-6993 | HIGH | 7.5 | 1.3% | Mar 24, 2020 | In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker ca... |
| CVE-2020-6987 | HIGH | 7.5 | 0.8% | Mar 24, 2020 | In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected p... |
| CVE-2020-6983 | HIGH | 7.5 | 1.2% | Mar 24, 2020 | In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected p... |
| CVE-2020-7003 | HIGH | 7.5 | 0.8% | Mar 24, 2020 | In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, ... |
| CVE-2020-10854 | HIGH | 7.5 | 0.4% | Mar 24, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Kernel stack addresses are ... |
| CVE-2020-10852 | HIGH | 7.8 | 0.1% | Mar 24, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. There is a stack overflow i... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now