2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8136 | HIGH | 7.5 | 1.5% | Mar 20, 2020 | Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing ... |
| CVE-2020-8134 | HIGH | 8.1 | 1.2% | Mar 20, 2020 | Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external netw... |
| CVE-2020-9425 | HIGH | 7.5 | 16.7% | Mar 20, 2020 | An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved... |
| CVE-2020-10792 | HIGH | 7.5 | 1.9% | Mar 20, 2020 | openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placin... |
| CVE-2020-1864 | HIGH | 8.1 | 0.8% | Mar 20, 2020 | Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain som... |
| CVE-2020-1709 | HIGH | 7.8 | 0.3% | Mar 20, 2020 | A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulne... |
| CVE-2020-1707 | HIGH | 7 | 0.3% | Mar 20, 2020 | A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification ... |
| CVE-2020-10597 | HIGH | 7.1 | 0.8% | Mar 20, 2020 | Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be ex... |
| CVE-2020-10682 | HIGH | 7.8 | 1.9% | Mar 20, 2020 | The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1... |
| CVE-2020-10669 | HIGH | 7.5 | 3.5% | Mar 19, 2020 | The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to authentication bypass on the... |
| CVE-2020-7006 | HIGH | 8.4 | 1.7% | Mar 19, 2020 | Systech Corporation NDS-5000 Terminal Server, NDS/5008 (8 Port, RJ45), firmware Version 02D.30. Successful exploitation ... |
| CVE-2020-10671 | HIGH | 8.8 | 0.7% | Mar 19, 2020 | The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections. This is a system-... |
| CVE-2020-3266 | HIGH | 7.8 | 0.6% | Mar 19, 2020 | A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbi... |
| CVE-2020-3265 | HIGH | 7.8 | 0.4% | Mar 19, 2020 | A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to ... |
| CVE-2020-3264 | HIGH | 7.1 | 0.7% | Mar 19, 2020 | A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflo... |
| CVE-2020-1705 | HIGH | 7 | 0.3% | Mar 19, 2020 | A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an i... |
| CVE-2020-10678 | HIGH | 8.8 | 1.0% | Mar 19, 2020 | In Octopus Deploy before 2020.1.5, for customers running on-premises Active Directory linked to their Octopus server, an... |
| CVE-2020-10675 | HIGH | 7.5 | 2.5% | Mar 19, 2020 | The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via... |
| CVE-2020-10648 | HIGH | 7.8 | 1.3% | Mar 19, 2020 | Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images ... |
| CVE-2020-10673 | HIGH | 8.8 | 8.0% | Mar 18, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-10672 | HIGH | 8.8 | 3.1% | Mar 18, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-9326 | HIGH | 7.5 | 1.0% | Mar 18, 2020 | BeyondTrust Privilege Management for Windows and Mac (aka PMWM; formerly Avecto Defendpoint) 5.1 through 5.5 before 5.5 ... |
| CVE-2020-9325 | HIGH | 7.5 | 1.8% | Mar 18, 2020 | Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download. |
| CVE-2020-9324 | HIGH | 7.5 | 1.4% | Mar 18, 2020 | Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC. |
| CVE-2020-7002 | HIGH | 7.8 | 1.1% | Mar 18, 2020 | Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows can be explo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now