2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25747 | CRITICAL | 9.4 | 1.8% | Sep 25, 2020 | The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote at... |
| CVE-2020-25726 | — | — | — | Sep 25, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-25223 | CRITICAL | 9.8 | 96.7% | Sep 25, 2020 | A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 ... |
| CVE-2020-25203 | MEDIUM | 5.5 | 0.5% | Sep 25, 2020 | The Framer Preview application 12 for Android exposes com.framer.viewer.FramerViewActivity to other applications. By cal... |
| CVE-2020-24718 | HIGH | 8.2 | 0.6% | Sep 25, 2020 | bhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and OpenIndiana through Hipster 2020... |
| CVE-2020-24692 | HIGH | 7.1 | 0.4% | Sep 25, 2020 | The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary scripts... |
| CVE-2020-24621 | HIGH | 8.8 | 3.1% | Sep 25, 2020 | A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11... |
| CVE-2020-24615 | MEDIUM | 5.3 | 1.0% | Sep 25, 2020 | Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP. |
| CVE-2020-24595 | MEDIUM | 5.3 | 0.9% | Sep 25, 2020 | Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensit... |
| CVE-2020-24594 | CRITICAL | 9.6 | 1.7% | Sep 25, 2020 | Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due ... |
| CVE-2020-24593 | HIGH | 7.2 | 1.1% | Sep 25, 2020 | Mitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and acces... |
| CVE-2020-24592 | MEDIUM | 5.3 | 0.9% | Sep 25, 2020 | Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system inf... |
| CVE-2020-23837 | HIGH | 8.8 | 0.8% | Sep 25, 2020 | A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attacke... |
| CVE-2020-13387 | HIGH | 7.5 | 1.1% | Sep 25, 2020 | Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323. |
| CVE-2020-12824 | HIGH | 7.5 | 1.1% | Sep 25, 2020 | Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP. |
| CVE-2020-11805 | CRITICAL | 9.8 | 1.4% | Sep 25, 2020 | Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN. |
| CVE-2020-17365 | HIGH | 7.8 | 0.4% | Sep 24, 2020 | Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an aut... |
| CVE-2020-15843 | HIGH | 7.3 | 0.4% | Sep 24, 2020 | ActFax Version 7.10 Build 0335 (2020-05-25) is susceptible to a privilege escalation vulnerability due to insecure folde... |
| CVE-2020-15162 | MEDIUM | 5.4 | 0.8% | Sep 24, 2020 | In PrestaShop from version 1.5.0.0 and before version 1.7.6.8, users are allowed to send compromised files. These attach... |
| CVE-2020-15160 | CRITICAL | 9.8 | 10.8% | Sep 24, 2020 | PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog ... |
| CVE-2020-13991 | HIGH | 7.5 | 2.5% | Sep 24, 2020 | vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register. |
| CVE-2020-15161 | MEDIUM | 6.1 | 0.9% | Sep 24, 2020 | In PrestaShop from version 1.6.0.4 and before version 1.7.6.8 an attacker is able to inject javascript while using the c... |
| CVE-2020-8348 | MEDIUM | 6.1 | 1.0% | Sep 24, 2020 | A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1... |
| CVE-2020-8347 | MEDIUM | 6.1 | 1.1% | Sep 24, 2020 | A reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.... |
| CVE-2020-8344 | — | — | — | Sep 24, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now