2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8252 | HIGH | 7.8 | 0.7% | Sep 18, 2020 | The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined th... |
| CVE-2020-8251 | HIGH | 7.5 | 8.8% | Sep 18, 2020 | Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can m... |
| CVE-2020-8247 | HIGH | 8.8 | 1.4% | Sep 18, 2020 | Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix AD... |
| CVE-2020-8246 | HIGH | 7.5 | 1.6% | Sep 18, 2020 | Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix AD... |
| CVE-2020-8245 | MEDIUM | 6.1 | 0.9% | Sep 18, 2020 | Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1... |
| CVE-2020-8237 | HIGH | 7.5 | 1.7% | Sep 18, 2020 | Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack. |
| CVE-2020-8225 | HIGH | 7.5 | 0.9% | Sep 18, 2020 | A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies ... |
| CVE-2020-8201 | HIGH | 7.4 | 5.1% | Sep 18, 2020 | Node.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver malicious payloads to unsuspec... |
| CVE-2020-8200 | MEDIUM | 6.5 | 1.3% | Sep 18, 2020 | Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Mi... |
| CVE-2020-8158 | CRITICAL | 9.8 | 2.1% | Sep 18, 2020 | Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties... |
| CVE-2020-11861 | HIGH | 7.8 | 0.3% | Sep 18, 2020 | Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior t... |
| CVE-2020-9084 | MEDIUM | 6.5 | 0.2% | Sep 18, 2020 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, ... |
| CVE-2020-25633 | MEDIUM | 5.3 | 1.2% | Sep 18, 2020 | A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain t... |
| CVE-2020-16230 | LOW | 2.3 | 0.3% | Sep 18, 2020 | All version of Ewon Flexy and Cosy prior to 14.1 use wildcards such as (*) under which domains can request resources. An... |
| CVE-2020-7945 | MEDIUM | 5.5 | 0.3% | Sep 18, 2020 | Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentia... |
| CVE-2020-3979 | HIGH | 7.8 | 0.4% | Sep 18, 2020 | InstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a predictable location at initia... |
| CVE-2020-25766 | HIGH | 7.5 | 1.2% | Sep 18, 2020 | An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form ... |
| CVE-2020-16247 | HIGH | 7.1 | 0.3% | Sep 18, 2020 | Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, p... |
| CVE-2020-16200 | MEDIUM | 6.5 | 0.6% | Sep 18, 2020 | Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maint... |
| CVE-2020-16198 | MEDIUM | 6.3 | 0.5% | Sep 18, 2020 | When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, ... |
| CVE-2020-15189 | HIGH | 7.2 | 2.8% | Sep 18, 2020 | SOY CMS 3.0.2 and earlier is affected by Remote Code Execution (RCE) using Unrestricted File Upload. Cross-Site Scriptin... |
| CVE-2020-15181 | CRITICAL | 9.8 | 1.4% | Sep 18, 2020 | The Alfresco Reset Password add-on before version 1.2.0 relies on untrusted inputs in a security decision. Intruders can... |
| CVE-2020-14525 | LOW | 3.5 | 0.4% | Sep 18, 2020 | Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-... |
| CVE-2020-14506 | MEDIUM | 4.3 | 0.3% | Sep 18, 2020 | Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not ... |
| CVE-2020-14390 | MEDIUM | 5.6 | 0.4% | Sep 18, 2020 | A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory writ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now