2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8564 | MEDIUM | 5.5 | 0.5% | Dec 7, 2020 | In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the... |
| CVE-2020-8563 | MEDIUM | 5.5 | 0.5% | Dec 7, 2020 | In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credenti... |
| CVE-2020-28935 | MEDIUM | 5.5 | 0.5% | Dec 7, 2020 | NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a... |
| CVE-2020-27641 | — | — | — | Dec 7, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-29136. Reason: This candidate is a reservation d... |
| CVE-2020-29600 | CRITICAL | 9.8 | 2.9% | Dec 7, 2020 | In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only rea... |
| CVE-2020-29599 | HIGH | 7.8 | 7.0% | Dec 7, 2020 | ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a passwo... |
| CVE-2020-29597 | CRITICAL | 9.8 | 71.7% | Dec 7, 2020 | IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows un... |
| CVE-2020-17521 | MEDIUM | 5.5 | 1.0% | Dec 7, 2020 | Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's impleme... |
| CVE-2020-13945 | MEDIUM | 6.5 | 73.0% | Dec 7, 2020 | In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the ... |
| CVE-2020-29595 | CRITICAL | 9.8 | 1.2% | Dec 7, 2020 | PlugIns\IDE_ACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build 1705 has a User Mode Write AV starting... |
| CVE-2020-26513 | MEDIUM | 5.5 | 0.9% | Dec 7, 2020 | An issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The ReqIF XML data, used by the codebeamer ALM ... |
| CVE-2020-26122 | HIGH | 7.2 | 1.2% | Dec 7, 2020 | Inspur NF5266M5 through 3.21.2 and other server M5 devices allow remote code execution via administrator privileges. The... |
| CVE-2020-27151 | HIGH | 8.8 | 2.0% | Dec 7, 2020 | An issue was discovered in Kata Containers through 1.11.3 and 2.x through 2.0-rc1. The runtime will execute binaries giv... |
| CVE-2020-9247 | HIGH | 7.8 | 0.8% | Dec 7, 2020 | There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain c... |
| CVE-2020-5800 | CRITICAL | 9.8 | 1.6% | Dec 7, 2020 | The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and ret... |
| CVE-2020-5799 | CRITICAL | 9.8 | 1.2% | Dec 7, 2020 | The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileg... |
| CVE-2020-5798 | HIGH | 7.8 | 0.3% | Dec 7, 2020 | inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user fr... |
| CVE-2020-28727 | MEDIUM | 6.1 | 0.9% | Dec 7, 2020 | Cross-site scripting (XSS) exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChoose... |
| CVE-2020-29573 | HIGH | 7.5 | 2.7% | Dec 6, 2020 | sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer ov... |
| CVE-2020-29572 | MEDIUM | 6.1 | 0.8% | Dec 6, 2020 | app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment fi... |
| CVE-2020-28950 | HIGH | 7.8 | 0.5% | Dec 4, 2020 | The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attac... |
| CVE-2020-27773 | LOW | 3.3 | 1.0% | Dec 4, 2020 | A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by... |
| CVE-2020-27772 | LOW | 3.3 | 1.1% | Dec 4, 2020 | A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick... |
| CVE-2020-27776 | LOW | 3.3 | 0.9% | Dec 4, 2020 | A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by I... |
| CVE-2020-27775 | LOW | 3.3 | 1.1% | Dec 4, 2020 | A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by Ima... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now