2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27892 | HIGH | 7.5 | 1.4% | Oct 27, 2020 | The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZC... |
| CVE-2020-27891 | HIGH | 7.5 | 1.4% | Oct 27, 2020 | The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZC... |
| CVE-2020-27890 | HIGH | 8.2 | 1.0% | Oct 27, 2020 | The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZC... |
| CVE-2020-27888 | HIGH | 7.5 | 1.0% | Oct 27, 2020 | An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices... |
| CVE-2020-27160 | CRITICAL | 9.8 | 4.7% | Oct 27, 2020 | Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digi... |
| CVE-2020-27159 | CRITICAL | 9.8 | 5.9% | Oct 27, 2020 | Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validat... |
| CVE-2020-27158 | CRITICAL | 9.8 | 7.2% | Oct 27, 2020 | Addressed remote code execution vulnerability in cgi_api.php that allowed escalation of privileges in Western Digital My... |
| CVE-2020-25765 | CRITICAL | 9.8 | 5.8% | Oct 27, 2020 | Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western ... |
| CVE-2020-12830 | CRITICAL | 9.8 | 3.2% | Oct 27, 2020 | Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privile... |
| CVE-2020-15238 | HIGH | 7 | 4.5% | Oct 27, 2020 | Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-me... |
| CVE-2020-7755 | HIGH | 7.5 | 2.1% | Oct 27, 2020 | All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted ... |
| CVE-2020-27853 | CRITICAL | 9.8 | 3.8% | Oct 27, 2020 | Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbi... |
| CVE-2020-26156 | — | — | — | Oct 27, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-11858 | HIGH | 7.8 | 2.7% | Oct 27, 2020 | Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Br... |
| CVE-2020-11854 | CRITICAL | 9.8 | 74.2% | Oct 27, 2020 | Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bri... |
| CVE-2020-7754 | HIGH | 7.5 | 3.4% | Oct 27, 2020 | This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer ... |
| CVE-2020-23945 | HIGH | 7.5 | 1.2% | Oct 27, 2020 | A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter... |
| CVE-2020-8579 | HIGH | 7.5 | 1.3% | Oct 27, 2020 | Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access ... |
| CVE-2020-6023 | HIGH | 7.8 | 0.3% | Oct 27, 2020 | Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in... |
| CVE-2020-6022 | MEDIUM | 5.5 | 0.3% | Oct 27, 2020 | Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files... |
| CVE-2020-23864 | HIGH | 7.8 | 0.5% | Oct 27, 2020 | An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a mali... |
| CVE-2020-10256 | CRITICAL | 9.8 | 0.9% | Oct 27, 2020 | An issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in beta versions of the 1... |
| CVE-2020-7753 | HIGH | 7.5 | 3.7% | Oct 27, 2020 | All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim(). |
| CVE-2020-8956 | LOW | 3.3 | 1.2% | Oct 27, 2020 | Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settin... |
| CVE-2020-27183 | CRITICAL | 9.8 | 1.3% | Oct 27, 2020 | A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to discl... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now