2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-8470HIGH7.5Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerabl...
CVE-2020-8468HIGH8.8Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a co...
CVE-2020-8467HIGH8.8A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow r...
CVE-2020-3950HIGH7.8VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for ...
CVE-2020-10120HIGH7.2cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545).
CVE-2020-10115HIGH7.2cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537).
CVE-2020-9346HIGH8.8Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attack...
CVE-2020-8787HIGH7.5SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow for an invalid Bean ID to be submit...
CVE-2020-7982HIGH8.1An issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7. A bug in the fork of the...
CVE-2020-7919HIGH7.5Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 f...
CVE-2020-7248HIGH7.5libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that...
CVE-2020-9471HIGH8.8Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package...
CVE-2020-9321HIGH7.5configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents f...
CVE-2020-6582HIGH7.5Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a la...
CVE-2020-6581HIGH7.3Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nasty_metachars interprets \n as the character \ and ...
CVE-2020-5849HIGH7.5Unraid 6.8.0 allows authentication bypass.
CVE-2020-5844HIGH7.2index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators t...
CVE-2020-3948HIGH7.8Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privi...
CVE-2020-3947HIGH8.8VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp. ...
CVE-2020-6988HIGH7.5Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Cont...
CVE-2020-6984HIGH7.5Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Cont...
CVE-2020-6585HIGH8.8Nagios Log Server 2.1.3 has CSRF.
CVE-2020-10241HIGH8.8An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of com_templates lead to CSR...
CVE-2020-10239HIGH8.8An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of com_fields allows acc...
CVE-2020-10238HIGH7.5An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now