2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-13328MEDIUM4.8An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to...
CVE-2020-13326MEDIUM4.3A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github pro...
CVE-2020-13325HIGH7.1A vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting ...
CVE-2020-13324MEDIUM6.5A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user...
CVE-2020-13323HIGH7.7A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be r...
CVE-2020-13322HIGH7.2A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthoriz...
CVE-2020-13321HIGH8.3A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing...
CVE-2020-13320MEDIUM6.5An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to...
CVE-2020-13319MEDIUM4.3An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check...
CVE-2020-13296HIGH8.8An issue has been discovered in GitLab affecting versions >=10.7 <13.0.14, >=13.1.0 <13.1.8, >=13.2.0 <13.2.6. Improper ...
CVE-2020-12506CRITICAL9.1Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the se...
CVE-2020-12505HIGH8.2Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some s...
CVE-2020-4629LOW3.3IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensi...
CVE-2020-15731LOW3.6An improper Input Validation vulnerability in the code handling file renaming and recovery in Bitdefender Engines allows...
CVE-2020-5132MEDIUM5.3SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as d...
CVE-2020-15216MEDIUM6.5In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an...
CVE-2020-4607HIGH7.8IBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local user to bypass security...
CVE-2020-25775MEDIUM6.3The Trend Micro Security 2020 (v16) consumer family of products is vulnerable to a security race condition arbitrary fil...
CVE-2020-25774MEDIUM4.3A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-b...
CVE-2020-25773HIGH7.8A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary c...
CVE-2020-25772MEDIUM5.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl...
CVE-2020-25771MEDIUM5.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl...
CVE-2020-25770MEDIUM5.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl...
CVE-2020-24565MEDIUM5.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl...
CVE-2020-24564MEDIUM5.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now