2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7216 | HIGH | 7.5 | 1.1% | Feb 5, 2020 | An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial ... |
| CVE-2020-5237 | HIGH | 8.8 | 3.9% | Feb 5, 2020 | Multiple relative path traversal vulnerabilities in the oneup/uploader-bundle before 1.9.3 and 2.1.5 allow remote attack... |
| CVE-2020-5208 | HIGH | 8.8 | 3.3% | Feb 5, 2020 | It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a re... |
| CVE-2020-8517 | HIGH | 7.5 | 6.8% | Feb 4, 2020 | An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials par... |
| CVE-2020-8450 | HIGH | 7.3 | 71.8% | Feb 4, 2020 | An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer ove... |
| CVE-2020-8449 | HIGH | 7.5 | 8.3% | Feb 4, 2020 | An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests ... |
| CVE-2020-8121 | HIGH | 8.1 | 1.0% | Feb 4, 2020 | A bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the sharer. |
| CVE-2020-8116 | HIGH | 7.3 | 3.1% | Feb 4, 2020 | Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an ... |
| CVE-2020-6060 | HIGH | 7.5 | 2.2% | Feb 4, 2020 | A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially ... |
| CVE-2020-6059 | HIGH | 8.2 | 2.6% | Feb 4, 2020 | An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A ... |
| CVE-2020-7221 | HIGH | 7.8 | 0.7% | Feb 4, 2020 | mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root becau... |
| CVE-2020-4163 | HIGH | 7.2 | 1.6% | Feb 4, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user... |
| CVE-2020-3938 | HIGH | 7.5 | 1.5% | Feb 4, 2020 | SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to laun... |
| CVE-2020-3937 | HIGH | 7.5 | 1.4% | Feb 4, 2020 | SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries ... |
| CVE-2020-8545 | HIGH | 7.5 | 1.3% | Feb 3, 2020 | Global.py in AIL framework 2.8 allows path traversal. |
| CVE-2020-3927 | HIGH | 7.5 | 1.2% | Feb 3, 2020 | An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific ... |
| CVE-2020-3926 | HIGH | 7.5 | 1.5% | Feb 3, 2020 | An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific ... |
| CVE-2020-3925 | HIGH | 8.8 | 2.8% | Feb 3, 2020 | A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long ... |
| CVE-2020-7914 | HIGH | 7.5 | 1.9% | Jan 31, 2020 | In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over t... |
| CVE-2020-7219 | HIGH | 7.5 | 2.0% | Jan 31, 2020 | HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were suscepti... |
| CVE-2020-7218 | HIGH | 7.5 | 1.5% | Jan 31, 2020 | HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptib... |
| CVE-2020-5232 | HIGH | 8.7 | 1.2% | Jan 31, 2020 | A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ... |
| CVE-2020-8495 | HIGH | 7.5 | 3.1% | Jan 30, 2020 | In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate se... |
| CVE-2020-8494 | HIGH | 8.8 | 1.1% | Jan 30, 2020 | In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser se... |
| CVE-2020-5230 | HIGH | 7.5 | 1.2% | Jan 30, 2020 | Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now