2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7198 | HIGH | 8.8 | 2.0% | Nov 6, 2020 | There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synerg... |
| CVE-2020-5795 | MEDIUM | 6.2 | 1.0% | Nov 6, 2020 | UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physi... |
| CVE-2020-4484 | MEDIUM | 4.3 | 0.8% | Nov 6, 2020 | IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could disclose sensitive information to an authenticat... |
| CVE-2020-4483 | MEDIUM | 4.3 | 1.0% | Nov 6, 2020 | IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow a remote attacker to obtain sensitive info... |
| CVE-2020-4482 | MEDIUM | 6.5 | 0.9% | Nov 6, 2020 | IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security. ... |
| CVE-2020-27589 | HIGH | 7.5 | 1.1% | Nov 6, 2020 | Synopsys hub-rest-api-python (aka blackduck on PyPI) version 0.0.25 - 0.0.52 does not validate SSL certificates in certa... |
| CVE-2020-27196 | HIGH | 7.5 | 1.4% | Nov 6, 2020 | An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2. The body parsing of HTTP requests eagerly par... |
| CVE-2020-26883 | HIGH | 7.5 | 1.4% | Nov 6, 2020 | In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of craf... |
| CVE-2020-26882 | HIGH | 7.5 | 1.4% | Nov 6, 2020 | In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON... |
| CVE-2020-10292 | HIGH | 8.2 | 1.5% | Nov 6, 2020 | Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove ... |
| CVE-2020-10291 | HIGH | 7.5 | 1.4% | Nov 6, 2020 | Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove ... |
| CVE-2020-28196 | HIGH | 7.5 | 4.4% | Nov 6, 2020 | MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerbero... |
| CVE-2020-27617 | MEDIUM | 6.5 | 2.5% | Nov 6, 2020 | eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the... |
| CVE-2020-27616 | MEDIUM | 6.5 | 2.5% | Nov 6, 2020 | ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can ... |
| CVE-2020-27152 | MEDIUM | 5.5 | 0.6% | Nov 6, 2020 | An issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2. It has an i... |
| CVE-2020-26892 | CRITICAL | 9.8 | 2.1% | Nov 6, 2020 | The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are han... |
| CVE-2020-26521 | HIGH | 7.5 | 2.1% | Nov 6, 2020 | The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code). |
| CVE-2020-25592 | CRITICAL | 9.8 | 57.5% | Nov 6, 2020 | In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authent... |
| CVE-2020-17490 | MEDIUM | 5.5 | 0.4% | Nov 6, 2020 | The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions. |
| CVE-2020-16846 | CRITICAL | 9.8 | 99.6% | Nov 6, 2020 | An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH clien... |
| CVE-2020-28250 | CRITICAL | 9.8 | 2.9% | Nov 6, 2020 | Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi be... |
| CVE-2020-28249 | MEDIUM | 6.1 | 3.0% | Nov 6, 2020 | Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note. |
| CVE-2020-28242 | MEDIUM | 6.5 | 1.5% | Nov 6, 2020 | An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x b... |
| CVE-2020-28241 | MEDIUM | 6.5 | 2.1% | Nov 6, 2020 | libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c. |
| CVE-2020-5667 | MEDIUM | 5.5 | 0.3% | Nov 6, 2020 | Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now