2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3113 | MEDIUM | 5.4 | 0.6% | Feb 19, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authent... |
| CVE-2020-8824 | MEDIUM | 5.4 | 0.6% | Feb 19, 2020 | Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access Control > Add Managed De... |
| CVE-2020-4230 | MEDIUM | 6.7 | 0.4% | Feb 19, 2020 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of privil... |
| CVE-2020-4200 | MEDIUM | 6.5 | 1.6% | Feb 19, 2020 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated atta... |
| CVE-2020-4161 | MEDIUM | 6.5 | 1.4% | Feb 19, 2020 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 could allow an authenticated attacker to cause a ... |
| CVE-2020-8633 | MEDIUM | 5.3 | 1.0% | Feb 18, 2020 | An issue was discovered in Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7. When grantors revoked a shared calend... |
| CVE-2020-9271 | MEDIUM | 6.5 | 0.4% | Feb 18, 2020 | ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php. |
| CVE-2020-9267 | MEDIUM | 6.5 | 0.5% | Feb 18, 2020 | SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajax_server.php. |
| CVE-2020-9266 | MEDIUM | 6.5 | 0.5% | Feb 18, 2020 | SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xaja... |
| CVE-2020-9264 | MEDIUM | 5.5 | 1.2% | Feb 18, 2020 | ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a Z... |
| CVE-2020-6845 | MEDIUM | 6.1 | 0.9% | Feb 18, 2020 | An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin account... |
| CVE-2020-1842 | MEDIUM | 6.8 | 0.2% | Feb 18, 2020 | Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X versio... |
| CVE-2020-1855 | MEDIUM | 6.1 | 0.2% | Feb 18, 2020 | Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3... |
| CVE-2020-1843 | MEDIUM | 6.8 | 0.2% | Feb 18, 2020 | Huawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71(SP1), OSCA-550AX versi... |
| CVE-2020-1789 | MEDIUM | 6.8 | 0.2% | Feb 18, 2020 | Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentic... |
| CVE-2020-1872 | MEDIUM | 4.6 | 0.2% | Feb 18, 2020 | Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9.1.0.252(C185E2R1P9T8), ... |
| CVE-2020-1814 | MEDIUM | 5.3 | 0.4% | Feb 18, 2020 | Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001... |
| CVE-2020-1882 | MEDIUM | 4.6 | 0.2% | Feb 18, 2020 | Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlie... |
| CVE-2020-1830 | MEDIUM | 5.3 | 0.7% | Feb 18, 2020 | Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001... |
| CVE-2020-7959 | MEDIUM | 5.3 | 1.4% | Feb 17, 2020 | LabVantage LIMS 8.3 does not properly maintain the confidentiality of database names. For example, the web application e... |
| CVE-2020-1853 | MEDIUM | 6.5 | 0.7% | Feb 17, 2020 | GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an aut... |
| CVE-2020-1857 | MEDIUM | 5.5 | 0.2% | Feb 17, 2020 | Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 version... |
| CVE-2020-9038 | MEDIUM | 5.4 | 3.6% | Feb 17, 2020 | Joplin through 1.0.184 allows Arbitrary File Read via XSS. |
| CVE-2020-6850 | MEDIUM | 6.1 | 1.4% | Feb 17, 2020 | Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML ... |
| CVE-2020-1692 | MEDIUM | 6.5 | 0.6% | Feb 17, 2020 | Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same cours... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now