2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3407 | HIGH | 8.6 | 1.5% | Sep 24, 2020 | A vulnerability in the RESTCONF and NETCONF-YANG access control list (ACL) function of Cisco IOS XE Software could allow... |
| CVE-2020-3404 | HIGH | 7.8 | 0.3% | Sep 24, 2020 | A vulnerability in the persistent Telnet/Secure Shell (SSH) CLI of Cisco IOS XE Software could allow an authenticated, l... |
| CVE-2020-3403 | HIGH | 7.8 | 0.4% | Sep 24, 2020 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to inject a command to ... |
| CVE-2020-3400 | HIGH | 8.8 | 1.0% | Sep 24, 2020 | A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to utilize ... |
| CVE-2020-3399 | HIGH | 8.6 | 1.4% | Sep 24, 2020 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE S... |
| CVE-2020-3396 | HIGH | 7.2 | 0.3% | Sep 24, 2020 | A vulnerability in the file system on the pluggable USB 3.0 Solid State Drive (SSD) for Cisco IOS XE Software could allo... |
| CVE-2020-3393 | HIGH | 7.8 | 0.3% | Sep 24, 2020 | A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attack... |
| CVE-2020-3390 | HIGH | 7.4 | 0.6% | Sep 24, 2020 | A vulnerability in Simple Network Management Protocol (SNMP) trap generation for wireless clients of the Cisco IOS XE Wi... |
| CVE-2020-3359 | HIGH | 8.6 | 1.5% | Sep 24, 2020 | A vulnerability in the multicast DNS (mDNS) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Con... |
| CVE-2020-3141 | HIGH | 8.8 | 1.8% | Sep 24, 2020 | Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote a... |
| CVE-2020-12815 | MEDIUM | 5.4 | 0.9% | Sep 24, 2020 | An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker ... |
| CVE-2020-12811 | MEDIUM | 6.1 | 0.8% | Sep 24, 2020 | A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow att... |
| CVE-2020-15223 | HIGH | 8 | 1.6% | Sep 24, 2020 | In ORY Fosite (the security first OAuth2 & OpenID Connect framework for Go) before version 0.34.0, the `TokenRevocationH... |
| CVE-2020-15222 | HIGH | 8.1 | 0.9% | Sep 24, 2020 | In ORY Fosite (the security first OAuth2 & OpenID Connect framework for Go) before version 0.31.0, when using "private_k... |
| CVE-2020-13119 | HIGH | 8.1 | 0.8% | Sep 24, 2020 | ismartgate PRO 1.5.9 is vulnerable to clickjacking. |
| CVE-2020-12843 | CRITICAL | 9.8 | 1.3% | Sep 24, 2020 | ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magi... |
| CVE-2020-12842 | CRITICAL | 9.8 | 1.5% | Sep 24, 2020 | ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php. |
| CVE-2020-12841 | MEDIUM | 6.5 | 0.5% | Sep 24, 2020 | ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php |
| CVE-2020-12840 | MEDIUM | 6.5 | 0.5% | Sep 24, 2020 | ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php |
| CVE-2020-12839 | CRITICAL | 9.8 | 1.5% | Sep 24, 2020 | ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php. |
| CVE-2020-12838 | CRITICAL | 9.8 | 1.5% | Sep 24, 2020 | ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php. |
| CVE-2020-12837 | HIGH | 7.5 | 0.9% | Sep 24, 2020 | ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magi... |
| CVE-2020-12282 | HIGH | 8.8 | 0.5% | Sep 24, 2020 | iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible ... |
| CVE-2020-12281 | MEDIUM | 6.5 | 0.5% | Sep 24, 2020 | iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php. |
| CVE-2020-6153 | — | — | — | Sep 24, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now