2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3304 | HIGH | 8.6 | 3.9% | Oct 21, 2020 | A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (F... |
| CVE-2020-3299 | MEDIUM | 5.8 | 2.3% | Oct 21, 2020 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticate... |
| CVE-2020-17381 | HIGH | 7.3 | 0.4% | Oct 21, 2020 | An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installa... |
| CVE-2020-15240 | CRITICAL | 9.1 | 0.8% | Oct 21, 2020 | omniauth-auth0 (rubygems) versions >= 2.3.0 and < 2.4.1 improperly validate the JWT token signature when using the `jwt_... |
| CVE-2020-7750 | CRITICAL | 9.6 | 6.1% | Oct 21, 2020 | This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not e... |
| CVE-2020-5651 | HIGH | 8.8 | 1.5% | Oct 21, 2020 | SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQ... |
| CVE-2020-5650 | MEDIUM | 6.1 | 0.9% | Oct 21, 2020 | Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arb... |
| CVE-2020-27613 | HIGH | 8.4 | 0.3% | Oct 21, 2020 | The installation procedure in BigBlueButton before 2.2.28 (or earlier) uses ClueCon as the FreeSWITCH password, which al... |
| CVE-2020-27612 | MEDIUM | 4.3 | 0.7% | Oct 21, 2020 | Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information ... |
| CVE-2020-27611 | HIGH | 7.3 | 0.7% | Oct 21, 2020 | BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint. |
| CVE-2020-27610 | HIGH | 7.5 | 1.2% | Oct 21, 2020 | The installation procedure in BigBlueButton before 2.2.28 (or earlier) exposes certain network services to external inte... |
| CVE-2020-27609 | MEDIUM | 5.3 | 0.8% | Oct 21, 2020 | BigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording in the user interface. ... |
| CVE-2020-27608 | MEDIUM | 6.1 | 0.7% | Oct 21, 2020 | In BigBlueButton before 2.2.28 (or earlier), uploaded presentations are sent to clients without a Content-Type header, w... |
| CVE-2020-27607 | MEDIUM | 6.5 | 0.8% | Oct 21, 2020 | In BigBlueButton before 2.2.28 (or earlier), the client-side Mute button only signifies that the server should stop acce... |
| CVE-2020-27606 | MEDIUM | 5.3 | 1.1% | Oct 21, 2020 | BigBlueButton before 2.2.28 (or earlier) does not set the secure flag for the session cookie in an https session, which ... |
| CVE-2020-27605 | CRITICAL | 9.8 | 1.2% | Oct 21, 2020 | BigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and consequently may be subject ... |
| CVE-2020-27604 | MEDIUM | 6.5 | 1.1% | Oct 21, 2020 | BigBlueButton before 2.3 does not implement LibreOffice sandboxing. This might make it easier for remote authenticated u... |
| CVE-2020-27603 | HIGH | 7.5 | 2.9% | Oct 21, 2020 | BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access exte... |
| CVE-2020-14901 | MEDIUM | 4.9 | 1.5% | Oct 21, 2020 | Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 19c. ... |
| CVE-2020-14900 | MEDIUM | 5.4 | 0.7% | Oct 21, 2020 | Vulnerability in the Oracle Application Express Group Calendar component of Oracle Database Server. The supported versio... |
| CVE-2020-14899 | MEDIUM | 5.4 | 0.7% | Oct 21, 2020 | Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version... |
| CVE-2020-14898 | MEDIUM | 5.4 | 0.7% | Oct 21, 2020 | Vulnerability in the Oracle Application Express Packaged Apps component of Oracle Database Server. The supported version... |
| CVE-2020-14897 | MEDIUM | 6.5 | 2.0% | Oct 21, 2020 | Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Lo... |
| CVE-2020-14896 | MEDIUM | 6.5 | 1.5% | Oct 21, 2020 | Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppor... |
| CVE-2020-14895 | MEDIUM | 5.4 | 0.8% | Oct 21, 2020 | Vulnerability in the Oracle Utilities Framework product of Oracle Utilities Applications (component: System Wide). Suppo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now