2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26088 | MEDIUM | 5.5 | 0.4% | Sep 24, 2020 | A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used b... |
| CVE-2020-24365 | HIGH | 8.8 | 11.4% | Sep 24, 2020 | An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic n... |
| CVE-2020-15840 | MEDIUM | 5.3 | 1.0% | Sep 24, 2020 | In Liferay Portal before 7.3.1, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.r... |
| CVE-2020-13521 | — | — | — | Sep 24, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-13508 | — | — | — | Sep 24, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-13507 | — | — | — | Sep 24, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-13505 | CRITICAL | 9.8 | 1.2% | Sep 24, 2020 | Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP w... |
| CVE-2020-13504 | CRITICAL | 9.8 | 1.2% | Sep 24, 2020 | Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted... |
| CVE-2020-13503 | — | — | — | Sep 24, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-13502 | — | — | — | Sep 24, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-13501 | CRITICAL | 9.8 | 2.9% | Sep 24, 2020 | An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1... |
| CVE-2020-13500 | CRITICAL | 9.8 | 2.9% | Sep 24, 2020 | SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/... |
| CVE-2020-13499 | CRITICAL | 9.8 | 2.9% | Sep 24, 2020 | An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1... |
| CVE-2020-12818 | MEDIUM | 5.3 | 0.9% | Sep 24, 2020 | An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker t... |
| CVE-2020-12817 | HIGH | 8.8 | 2.3% | Sep 24, 2020 | An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticat... |
| CVE-2020-12816 | MEDIUM | 6.1 | 1.2% | Sep 24, 2020 | An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to ... |
| CVE-2020-12280 | MEDIUM | 6.5 | 0.5% | Sep 24, 2020 | iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /... |
| CVE-2020-6020 | MEDIUM | 6.4 | 0.5% | Sep 24, 2020 | Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 ... |
| CVE-2020-22453 | MEDIUM | 6.1 | 0.7% | Sep 24, 2020 | Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information. |
| CVE-2020-16148 | HIGH | 7.2 | 1.9% | Sep 24, 2020 | The ping page of the administration panel in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell... |
| CVE-2020-16147 | CRITICAL | 9.8 | 2.0% | Sep 24, 2020 | The login page in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell access via Unauthenticated... |
| CVE-2020-24560 | HIGH | 7.5 | 1.8% | Sep 24, 2020 | An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family o... |
| CVE-2020-15604 | HIGH | 7.5 | 1.6% | Sep 24, 2020 | An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family o... |
| CVE-2020-25604 | MEDIUM | 4.7 | 0.3% | Sep 23, 2020 | An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. Wh... |
| CVE-2020-25603 | HIGH | 7.8 | 0.4% | Sep 23, 2020 | An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event chan... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now