2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3536 | MEDIUM | 5.4 | 0.6% | Oct 8, 2020 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem... |
| CVE-2020-3535 | HIGH | 8.4 | 0.6% | Oct 8, 2020 | A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an aut... |
| CVE-2020-3467 | HIGH | 7.7 | 0.9% | Oct 8, 2020 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat... |
| CVE-2020-3320 | MEDIUM | 5.4 | 0.6% | Oct 8, 2020 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an authenticated,... |
| CVE-2020-15501 | MEDIUM | 6.5 | 1.1% | Oct 7, 2020 | Smarter Coffee Maker before 2nd generation allows firmware replacement without authentication or authorization. User int... |
| CVE-2020-25867 | MEDIUM | 5.3 | 2.8% | Oct 7, 2020 | SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to ... |
| CVE-2020-25768 | MEDIUM | 5.3 | 0.8% | Oct 7, 2020 | Contao before 4.4.52, 4.9.x before 4.9.6, and 4.10.x before 4.10.1 have Improper Input Validation. It is possible to inj... |
| CVE-2020-15226 | MEDIUM | 4.3 | 1.0% | Oct 7, 2020 | In GLPI before version 9.5.2, there is a SQL Injection in the API's search function. Not only is it possible to break th... |
| CVE-2020-7316 | HIGH | 7.8 | 0.4% | Oct 7, 2020 | Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0 allows local user... |
| CVE-2020-26164 | MEDIUM | 5.5 | 0.5% | Oct 7, 2020 | In kdeconnect-kde (aka KDE Connect) before 20.08.2, an attacker on the local network could send crafted packets that tri... |
| CVE-2020-15217 | MEDIUM | 5.3 | 1.0% | Oct 7, 2020 | In GLPI before version 9.5.2, there is a leakage of user information through the public FAQ. The issue was introduced in... |
| CVE-2020-15177 | MEDIUM | 6.1 | 0.8% | Oct 7, 2020 | In GLPI before version 9.5.2, the `install/install.php` endpoint insecurely stores user input into the database as `url_... |
| CVE-2020-15176 | HIGH | 8.6 | 1.1% | Oct 7, 2020 | In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does no... |
| CVE-2020-15175 | CRITICAL | 9.1 | 70.9% | Oct 7, 2020 | In GLPI before version 9.5.2, the `pluginimage.send.php` endpoint allows a user to specify an image from a plugin. The... |
| CVE-2020-26880 | HIGH | 7.8 | 0.3% | Oct 7, 2020 | Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifying... |
| CVE-2020-26876 | HIGH | 7.5 | 9.2% | Oct 7, 2020 | The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step (for cour... |
| CVE-2020-17551 | MEDIUM | 4.8 | 1.1% | Oct 7, 2020 | ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution. |
| CVE-2020-26870 | MEDIUM | 6.1 | 4.5% | Oct 7, 2020 | Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily... |
| CVE-2020-26596 | HIGH | 8.8 | 5.4% | Oct 7, 2020 | The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to exe... |
| CVE-2020-24246 | HIGH | 7.5 | 1.3% | Oct 7, 2020 | Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php... |
| CVE-2020-13342 | LOW | 2.7 | 0.9% | Oct 7, 2020 | An issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2: Lack of Rate Limiting at ... |
| CVE-2020-11800 | CRITICAL | 9.8 | 9.2% | Oct 7, 2020 | Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code. |
| CVE-2020-24722 | MEDIUM | 5.9 | 2.4% | Oct 7, 2020 | An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-10-05, as used in CO... |
| CVE-2020-14355 | MEDIUM | 6.6 | 2.5% | Oct 7, 2020 | Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display syste... |
| CVE-2020-25343 | MEDIUM | 5.4 | 0.7% | Oct 7, 2020 | Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script o... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now