2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7466 | HIGH | 7.5 | 2.0% | Oct 6, 2020 | The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication m... |
| CVE-2020-7465 | CRITICAL | 9.8 | 2.8% | Oct 6, 2020 | The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet... |
| CVE-2020-25802 | HIGH | 7.2 | 1.1% | Oct 6, 2020 | Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticat... |
| CVE-2020-25644 | HIGH | 7.5 | 2.2% | Oct 6, 2020 | A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It m... |
| CVE-2020-25643 | HIGH | 7.2 | 3.3% | Oct 6, 2020 | A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read ove... |
| CVE-2020-25641 | MEDIUM | 5.5 | 0.4% | Oct 6, 2020 | A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec reques... |
| CVE-2020-25637 | MEDIUM | 6.7 | 0.5% | Oct 6, 2020 | A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting i... |
| CVE-2020-24219 | HIGH | 7.5 | 23.0% | Oct 6, 2020 | An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can send crafted unauthentic... |
| CVE-2020-24218 | CRITICAL | 9.8 | 1.9% | Oct 6, 2020 | An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can log in as root via the p... |
| CVE-2020-24217 | CRITICAL | 9.8 | 39.0% | Oct 6, 2020 | An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpo... |
| CVE-2020-24216 | HIGH | 7.5 | 2.1% | Oct 6, 2020 | An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. When the administrato... |
| CVE-2020-15598 | HIGH | 7.5 | 3.1% | Oct 6, 2020 | Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special request. NOTE: The discoverer reports "Tr... |
| CVE-2020-25987 | HIGH | 7.5 | 1.6% | Oct 6, 2020 | MonoCMS Blog 1.0 stores hard-coded admin hashes in the log.xml file in the source files for MonoCMS Blog. Hash type is b... |
| CVE-2020-25986 | MEDIUM | 6.5 | 0.6% | Oct 6, 2020 | A Cross Site Request Forgery (CSRF) vulnerability in MonoCMS Blog 1.0 allows attackers to change the password of a user. |
| CVE-2020-25613 | HIGH | 7.5 | 3.8% | Oct 6, 2020 | An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP serv... |
| CVE-2020-24215 | CRITICAL | 9.8 | 19.0% | Oct 6, 2020 | An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can use har... |
| CVE-2020-24214 | CRITICAL | 9.8 | 35.4% | Oct 6, 2020 | An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can send a ... |
| CVE-2020-23832 | MEDIUM | 6.1 | 2.1% | Oct 6, 2020 | A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System... |
| CVE-2020-5634 | HIGH | 8.8 | 0.6% | Oct 6, 2020 | ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-17... |
| CVE-2020-5632 | HIGH | 7.8 | 0.4% | Oct 6, 2020 | InfoCage SiteShell series (Host type SiteShell for IIS V1.4, V1.5, and V1.6, Host type SiteShell for IIS prior to revisi... |
| CVE-2020-5631 | MEDIUM | 6.1 | 1.0% | Oct 6, 2020 | Stored cross-site scripting vulnerability in CMONOS.JP ver2.0.20191009 and earlier allows remote attackers to inject arb... |
| CVE-2020-26572 | MEDIUM | 5.5 | 0.4% | Oct 6, 2020 | The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher. |
| CVE-2020-26571 | MEDIUM | 5.5 | 0.4% | Oct 6, 2020 | The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu... |
| CVE-2020-26570 | MEDIUM | 5.5 | 0.4% | Oct 6, 2020 | The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read... |
| CVE-2020-15237 | MEDIUM | 5.9 | 1.0% | Oct 5, 2020 | In Shrine before version 3.3.0, when using the `derivation_endpoint` plugin, it's possible for the attacker to use a tim... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now