2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28579 | HIGH | 8.8 | 49.3% | Nov 18, 2020 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote att... |
| CVE-2020-28578 | CRITICAL | 9.8 | 72.3% | Nov 18, 2020 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote a... |
| CVE-2020-28574 | HIGH | 7.5 | 2.8% | Nov 18, 2020 | A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Securit... |
| CVE-2020-28572 | HIGH | 7.8 | 0.4% | Nov 18, 2020 | A vulnerability in Trend Micro Apex One could allow an unprivileged user to abuse the product installer to reinstall the... |
| CVE-2020-27697 | HIGH | 7.8 | 0.6% | Nov 18, 2020 | Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin... |
| CVE-2020-27696 | HIGH | 7.8 | 0.5% | Nov 18, 2020 | Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin... |
| CVE-2020-27695 | HIGH | 7.8 | 0.5% | Nov 18, 2020 | Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin... |
| CVE-2020-4592 | MEDIUM | 6.5 | 0.8% | Nov 18, 2020 | IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corrup... |
| CVE-2020-3392 | HIGH | 7.5 | 1.5% | Nov 18, 2020 | A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to ... |
| CVE-2020-3367 | HIGH | 7.8 | 0.8% | Nov 18, 2020 | A vulnerability in the log subscription subsystem of Cisco AsyncOS for the Cisco Secure Web Appliance (formerly Web Secu... |
| CVE-2020-27126 | MEDIUM | 6.1 | 1.0% | Nov 18, 2020 | A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site ... |
| CVE-2020-26097 | CRITICAL | 9.8 | 1.8% | Nov 18, 2020 | The firmware of the PLANET Technology Corp NVR-915 and NVR-1615 before 2020-10-28 embeds default credentials for root ac... |
| CVE-2020-26081 | MEDIUM | 6.1 | 0.8% | Nov 18, 2020 | Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote ... |
| CVE-2020-26080 | MEDIUM | 4.1 | 0.7% | Nov 18, 2020 | A vulnerability in the user management functionality of Cisco IoT Field Network Director (FND) could allow an authentica... |
| CVE-2020-26079 | MEDIUM | 4.9 | 1.0% | Nov 18, 2020 | A vulnerability in the web UI of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to... |
| CVE-2020-26078 | MEDIUM | 6.5 | 1.4% | Nov 18, 2020 | A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attack... |
| CVE-2020-26077 | MEDIUM | 4.3 | 0.7% | Nov 18, 2020 | A vulnerability in the access control functionality of Cisco IoT Field Network Director (FND) could allow an authenticat... |
| CVE-2020-26076 | HIGH | 7.5 | 1.3% | Nov 18, 2020 | A vulnerability in Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensit... |
| CVE-2020-26075 | HIGH | 8.8 | 1.6% | Nov 18, 2020 | A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker ... |
| CVE-2020-26072 | HIGH | 8.7 | 1.0% | Nov 18, 2020 | A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker ... |
| CVE-2020-26068 | MEDIUM | 6.5 | 0.7% | Nov 18, 2020 | A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authentic... |
| CVE-2020-28367 | HIGH | 7.5 | 2.4% | Nov 18, 2020 | Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time ... |
| CVE-2020-28366 | HIGH | 7.5 | 2.2% | Nov 18, 2020 | Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time ... |
| CVE-2020-28362 | HIGH | 7.5 | 3.8% | Nov 18, 2020 | Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. |
| CVE-2020-28091 | HIGH | 7.5 | 3.8% | Nov 18, 2020 | cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parame... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now