2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8465 | CRITICAL | 9.8 | 2.6% | Dec 17, 2020 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate sy... |
| CVE-2020-8464 | HIGH | 7.5 | 6.3% | Dec 17, 2020 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests... |
| CVE-2020-8463 | HIGH | 7.5 | 5.9% | Dec 17, 2020 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a glob... |
| CVE-2020-8462 | MEDIUM | 4.8 | 1.1% | Dec 17, 2020 | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow a... |
| CVE-2020-8461 | HIGH | 8.8 | 1.1% | Dec 17, 2020 | A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an at... |
| CVE-2020-27010 | MEDIUM | 4.8 | 0.7% | Dec 17, 2020 | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow a... |
| CVE-2020-35545 | CRITICAL | 9.8 | 3.8% | Dec 17, 2020 | Time-based SQL injection exists in Spotweb 1.4.9 via the query string. |
| CVE-2020-26276 | CRITICAL | 9.8 | 2.2% | Dec 17, 2020 | Fleet is an open source osquery manager. In Fleet before version 3.5.1, due to issues in Go's standard library XML parsi... |
| CVE-2020-4846 | LOW | 2.7 | 1.0% | Dec 17, 2020 | IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a de... |
| CVE-2020-4845 | MEDIUM | 5.4 | 0.6% | Dec 17, 2020 | IBM Security Key Lifecycle Manager 3.0.1 and 4.0 is vulnerable to cross-site scripting. This vulnerability allows users ... |
| CVE-2020-35491 | HIGH | 8.1 | 7.8% | Dec 17, 2020 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-35490 | HIGH | 8.1 | 6.3% | Dec 17, 2020 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-35489 | CRITICAL | 10 | 89.3% | Dec 17, 2020 | The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote cod... |
| CVE-2020-15294 | HIGH | 7 | 0.3% | Dec 17, 2020 | Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData() results ... |
| CVE-2020-15293 | MEDIUM | 5.5 | 0.3% | Dec 17, 2020 | Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to ins... |
| CVE-2020-15292 | MEDIUM | 5.5 | 0.3% | Dec 17, 2020 | Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, Int... |
| CVE-2020-22083 | CRITICAL | 9.8 | 6.1% | Dec 17, 2020 | jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode()... |
| CVE-2020-35453 | MEDIUM | 5.3 | 0.8% | Dec 17, 2020 | HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibl... |
| CVE-2020-35177 | MEDIUM | 5.3 | 1.3% | Dec 17, 2020 | HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in... |
| CVE-2020-29652 | HIGH | 7.5 | 3.2% | Dec 17, 2020 | A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go all... |
| CVE-2020-27199 | HIGH | 7.5 | 2.9% | Dec 17, 2020 | The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the application... |
| CVE-2020-35123 | MEDIUM | 6.5 | 1.5% | Dec 17, 2020 | In Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in ... |
| CVE-2020-25011 | CRITICAL | 9.8 | 1.6% | Dec 17, 2020 | A sensitive information disclosure vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Se... |
| CVE-2020-25010 | CRITICAL | 9.8 | 2.4% | Dec 17, 2020 | An arbitrary code execution vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers S... |
| CVE-2020-25096 | HIGH | 8.8 | 1.0% | Dec 17, 2020 | LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different ro... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now