2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7122 | HIGH | 7.5 | 1.0% | Sep 23, 2020 | Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been ... |
| CVE-2020-7121 | HIGH | 7.5 | 1.0% | Sep 23, 2020 | Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been ... |
| CVE-2020-24626 | CRITICAL | 9.8 | 3.0% | Sep 23, 2020 | Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execut... |
| CVE-2020-24625 | HIGH | 7.5 | 1.6% | Sep 23, 2020 | Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE P... |
| CVE-2020-24624 | HIGH | 7.5 | 1.6% | Sep 23, 2020 | Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE... |
| CVE-2020-14370 | MEDIUM | 5.3 | 1.4% | Sep 23, 2020 | An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecat... |
| CVE-2020-14365 | HIGH | 7.1 | 0.2% | Sep 23, 2020 | A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, wh... |
| CVE-2020-10714 | HIGH | 7.5 | 1.5% | Sep 23, 2020 | A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with... |
| CVE-2020-10687 | MEDIUM | 4.8 | 1.1% | Sep 23, 2020 | A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to C... |
| CVE-2020-25826 | HIGH | 7.8 | 0.4% | Sep 23, 2020 | PingID Integration for Windows Login before 2.4.2 allows local users to gain privileges by modifying CefSharp.BrowserSub... |
| CVE-2020-25821 | HIGH | 7.5 | 1.4% | Sep 23, 2020 | peg-markdown 0.4.14 has a NULL pointer dereference in process_raw_blocks in markdown_lib.c. NOTE: This vulnerability onl... |
| CVE-2020-3569 | HIGH | 8.6 | 3.3% | Sep 23, 2020 | Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software coul... |
| CVE-2020-3143 | HIGH | 7.2 | 8.5% | Sep 23, 2020 | A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software, Cisco TeleP... |
| CVE-2020-3137 | MEDIUM | 6.1 | 0.8% | Sep 23, 2020 | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) could allow an unauthentic... |
| CVE-2020-3135 | HIGH | 8.8 | 0.5% | Sep 23, 2020 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM) could allow an unaut... |
| CVE-2020-3133 | HIGH | 7.5 | 1.4% | Sep 23, 2020 | A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could a... |
| CVE-2020-3130 | MEDIUM | 6.5 | 1.8% | Sep 23, 2020 | A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker t... |
| CVE-2020-3124 | MEDIUM | 6.5 | 0.5% | Sep 23, 2020 | A vulnerability in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) could allow an un... |
| CVE-2020-3117 | MEDIUM | 4.7 | 0.9% | Sep 23, 2020 | A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security ... |
| CVE-2020-3116 | MEDIUM | 5.5 | 0.7% | Sep 23, 2020 | A vulnerability in the way Cisco Webex applications process Universal Communications Format (UCF) files could allow an a... |
| CVE-2020-25515 | HIGH | 7.8 | 0.5% | Sep 22, 2020 | Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books > New Book , http://<s... |
| CVE-2020-25514 | HIGH | 8.4 | 0.6% | Sep 22, 2020 | Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http://... |
| CVE-2020-15839 | MEDIUM | 6.5 | 2.2% | Sep 22, 2020 | Liferay Portal before 7.3.3, and Liferay DXP 7.1 before fix pack 18 and 7.2 before fix pack 6, does not restrict the siz... |
| CVE-2020-14031 | HIGH | 7.2 | 1.6% | Sep 22, 2020 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be u... |
| CVE-2020-14028 | HIGH | 7.2 | 1.9% | Sep 22, 2020 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal vulnerability in the Auto... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now