2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7146 | CRITICAL | 9.8 | 6.6% | Oct 19, 2020 | A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Man... |
| CVE-2020-7145 | CRITICAL | 9.8 | 6.7% | Oct 19, 2020 | A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Man... |
| CVE-2020-7144 | CRITICAL | 9.8 | 6.6% | Oct 19, 2020 | A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent... |
| CVE-2020-7143 | CRITICAL | 9.8 | 6.6% | Oct 19, 2020 | A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent M... |
| CVE-2020-7142 | CRITICAL | 9.8 | 6.6% | Oct 19, 2020 | A eventinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent ... |
| CVE-2020-7141 | CRITICAL | 9.8 | 6.7% | Oct 19, 2020 | A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Ma... |
| CVE-2020-24652 | CRITICAL | 9.8 | 6.7% | Oct 19, 2020 | A addvsiinterfaceinfo expression language injection remote code execution vulnerability was discovered in HPE Intelligen... |
| CVE-2020-24651 | CRITICAL | 9.8 | 6.7% | Oct 19, 2020 | A syslogtempletselectwin expression language injection remote code execution vulnerability was discovered in HPE Intelli... |
| CVE-2020-24650 | CRITICAL | 9.8 | 6.6% | Oct 19, 2020 | A legend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management ... |
| CVE-2020-24649 | CRITICAL | 9.8 | 4.1% | Oct 19, 2020 | A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intell... |
| CVE-2020-24648 | CRITICAL | 9.8 | 10.1% | Oct 19, 2020 | A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE... |
| CVE-2020-24647 | CRITICAL | 9.8 | 4.1% | Oct 19, 2020 | A remote accessmgrservlet classname input validation code execution vulnerability was discovered in HPE Intelligent Mana... |
| CVE-2020-24646 | CRITICAL | 9.8 | 6.7% | Oct 19, 2020 | A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Managemen... |
| CVE-2020-24630 | HIGH | 8.8 | 1.8% | Oct 19, 2020 | A remote operatoronlinelist_content privilege escalation vulnerability was discovered in HPE Intelligent Management Cent... |
| CVE-2020-24629 | CRITICAL | 9.8 | 2.9% | Oct 19, 2020 | A remote urlaccesscontroller authentication bypass vulnerability was discovered in HPE Intelligent Management Center (iM... |
| CVE-2020-16161 | HIGH | 7.5 | 1.8% | Oct 19, 2020 | GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData(). Parsing malicious input can result in a... |
| CVE-2020-16160 | HIGH | 7.5 | 1.3% | Oct 19, 2020 | GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress(). Parsing malicious input can result in a... |
| CVE-2020-16159 | CRITICAL | 9.1 | 1.6% | Oct 19, 2020 | GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData(). Parsing malicious input can resul... |
| CVE-2020-16158 | HIGH | 8.8 | 1.9% | Oct 19, 2020 | GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE(). Parsing malicio... |
| CVE-2020-26891 | MEDIUM | 6.1 | 1.9% | Oct 19, 2020 | AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET para... |
| CVE-2020-24266 | HIGH | 7.5 | 2.5% | Oct 19, 2020 | An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that c... |
| CVE-2020-24265 | HIGH | 7.5 | 2.5% | Oct 19, 2020 | An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorC... |
| CVE-2020-8929 | MEDIUM | 5.3 | 0.5% | Oct 19, 2020 | A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker... |
| CVE-2020-15910 | MEDIUM | 4.7 | 5.5% | Oct 19, 2020 | SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible... |
| CVE-2020-15909 | HIGH | 8.8 | 2.2% | Oct 19, 2020 | SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access. The N-Cen... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now