2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14513 | HIGH | 7.5 | 1.6% | Sep 16, 2020 | CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted licen... |
| CVE-2020-14509 | CRITICAL | 9.8 | 2.0% | Sep 16, 2020 | Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mecha... |
| CVE-2020-6781 | HIGH | 7.4 | 0.5% | Sep 16, 2020 | Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17... |
| CVE-2020-6146 | HIGH | 8.8 | 78.5% | Sep 16, 2020 | An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.3... |
| CVE-2020-1694 | MEDIUM | 4.9 | 1.6% | Sep 16, 2020 | A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-au... |
| CVE-2020-13259 | HIGH | 8.8 | 4.7% | Sep 16, 2020 | A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauth... |
| CVE-2020-10718 | HIGH | 7.5 | 1.4% | Sep 16, 2020 | A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed ... |
| CVE-2020-25040 | HIGH | 8.8 | 2.0% | Sep 16, 2020 | Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit contain... |
| CVE-2020-25039 | HIGH | 8.1 | 2.0% | Sep 16, 2020 | Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namesp... |
| CVE-2020-25015 | MEDIUM | 6.5 | 3.1% | Sep 16, 2020 | A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally... |
| CVE-2020-14348 | MEDIUM | 4.3 | 0.8% | Sep 16, 2020 | It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the us... |
| CVE-2020-14306 | HIGH | 8.8 | 1.3% | Sep 16, 2020 | An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions thr... |
| CVE-2020-13928 | MEDIUM | 6.1 | 2.6% | Sep 16, 2020 | Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitize... |
| CVE-2020-10748 | MEDIUM | 6.1 | 0.9% | Sep 16, 2020 | A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circ... |
| CVE-2020-10715 | MEDIUM | 4.3 | 0.9% | Sep 16, 2020 | A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw allows an attacker to craft ... |
| CVE-2020-3990 | MEDIUM | 6.5 | 0.3% | Sep 16, 2020 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerabil... |
| CVE-2020-3989 | LOW | 3.3 | 0.3% | Sep 16, 2020 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability du... |
| CVE-2020-3988 | MEDIUM | 6.1 | 0.3% | Sep 16, 2020 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability ... |
| CVE-2020-3987 | MEDIUM | 6.1 | 0.3% | Sep 16, 2020 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability ... |
| CVE-2020-3986 | MEDIUM | 6.1 | 0.3% | Sep 16, 2020 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability ... |
| CVE-2020-3980 | MEDIUM | 6.7 | 0.3% | Sep 16, 2020 | VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide ... |
| CVE-2020-7532 | HIGH | 7.8 | 1.4% | Sep 16, 2020 | A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and pri... |
| CVE-2020-7531 | HIGH | 7.8 | 0.8% | Sep 16, 2020 | A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allow... |
| CVE-2020-7530 | HIGH | 8.8 | 1.2% | Sep 16, 2020 | A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows... |
| CVE-2020-7529 | MEDIUM | 5.5 | 0.9% | Sep 16, 2020 | A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAP... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now