2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15590 | HIGH | 7.5 | 2.5% | Sep 14, 2020 | A vulnerability in the Private Internet Access (PIA) VPN Client for Linux 1.5 through 2.3+ allows remote attackers to by... |
| CVE-2020-13315 | HIGH | 7.5 | 2.1% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The profile activity page was not r... |
| CVE-2020-13310 | MEDIUM | 6.5 | 1.7% | Sep 14, 2020 | A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the g... |
| CVE-2020-13309 | HIGH | 8.8 | 1.3% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SS... |
| CVE-2020-13306 | HIGH | 7.5 | 1.8% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abu... |
| CVE-2020-13305 | MEDIUM | 4.3 | 1.0% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not invalidating project... |
| CVE-2020-13304 | HIGH | 7.2 | 1.6% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Same 2 factor Authentication secret... |
| CVE-2020-13302 | HIGH | 7.2 | 1.1% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Under certain conditions GitLab was... |
| CVE-2020-13301 | MEDIUM | 4.8 | 1.1% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a stored X... |
| CVE-2020-13298 | MEDIUM | 5.8 | 1.2% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality ... |
| CVE-2020-13297 | MEDIUM | 5.4 | 1.0% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. When 2 factor authentication was en... |
| CVE-2020-11881 | HIGH | 7.5 | 4.3% | Sep 14, 2020 | An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated re... |
| CVE-2020-13317 | MEDIUM | 4.9 | 1.4% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8, and 13.3.4. An insufficient check in the Graph... |
| CVE-2020-13314 | MEDIUM | 5.3 | 1.3% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Omniauth endpoint allowed a ... |
| CVE-2020-13313 | MEDIUM | 4.3 | 1.0% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. An unauthorized project maintainer ... |
| CVE-2020-13312 | CRITICAL | 9.8 | 0.9% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab OAuth endpoint was vulnerabl... |
| CVE-2020-13311 | MEDIUM | 4.3 | 1.5% | Sep 14, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was vulnerable to a parser att... |
| CVE-2020-10229 | HIGH | 8.8 | 0.8% | Sep 14, 2020 | A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such a... |
| CVE-2020-10228 | HIGH | 8.8 | 2.9% | Sep 14, 2020 | A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, re... |
| CVE-2020-10227 | MEDIUM | 6.1 | 1.1% | Sep 14, 2020 | A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arb... |
| CVE-2020-25576 | CRITICAL | 9.8 | 1.6% | Sep 14, 2020 | An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandle... |
| CVE-2020-25575 | CRITICAL | 9.8 | 2.9% | Sep 14, 2020 | An issue was discovered in the failure crate through 0.1.5 for Rust. It may introduce "compatibility hazards" in some ap... |
| CVE-2020-25574 | HIGH | 7.5 | 2.4% | Sep 14, 2020 | An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve() could resu... |
| CVE-2020-25573 | CRITICAL | 9.8 | 1.8% | Sep 14, 2020 | An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust. It creates an uninitialized NonNull pointer,... |
| CVE-2020-24457 | HIGH | 7.6 | 0.4% | Sep 14, 2020 | Logic error in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processors may allow an unauthenticated ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now