2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9733 | HIGH | 7.5 | 3.8% | Sep 10, 2020 | An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high ... |
| CVE-2020-9732 | CRITICAL | 9 | 2.8% | Sep 10, 2020 | The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability... |
| CVE-2020-4578 | MEDIUM | 5.4 | 0.7% | Sep 10, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows... |
| CVE-2020-24582 | MEDIUM | 6.1 | 0.7% | Sep 10, 2020 | Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user ... |
| CVE-2020-17408 | HIGH | 7.5 | 74.0% | Sep 10, 2020 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressClu... |
| CVE-2020-14198 | HIGH | 7.5 | 3.4% | Sep 10, 2020 | Bitcoin Core 0.20.0 allows remote denial of service. |
| CVE-2020-10773 | MEDIUM | 4.4 | 0.4% | Sep 10, 2020 | A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incor... |
| CVE-2020-8758 | CRITICAL | 9.8 | 1.7% | Sep 10, 2020 | Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, ... |
| CVE-2020-6097 | HIGH | 7.5 | 2.4% | Sep 10, 2020 | An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1... |
| CVE-2020-5780 | MEDIUM | 5.3 | 1.6% | Sep 10, 2020 | Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to ve... |
| CVE-2020-25221 | HIGH | 7.8 | 0.7% | Sep 10, 2020 | get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorr... |
| CVE-2020-24739 | MEDIUM | 6.5 | 0.4% | Sep 10, 2020 | A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRF_TO... |
| CVE-2020-7315 | MEDIUM | 6.7 | 0.5% | Sep 10, 2020 | DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code... |
| CVE-2020-7314 | HIGH | 7.8 | 0.4% | Sep 10, 2020 | Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAf... |
| CVE-2020-7312 | HIGH | 7.8 | 0.3% | Sep 10, 2020 | DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local u... |
| CVE-2020-7311 | HIGH | 7 | 0.3% | Sep 10, 2020 | Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users t... |
| CVE-2020-24552 | HIGH | 7.2 | 1.4% | Sep 10, 2020 | Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation,... |
| CVE-2020-25220 | HIGH | 7.8 | 0.4% | Sep 10, 2020 | The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because s... |
| CVE-2020-24655 | MEDIUM | 5.1 | 0.2% | Sep 10, 2020 | A race condition in the Twilio Authy 2-Factor Authentication application before 24.3.7 for Android allows a user to pote... |
| CVE-2020-15173 | CRITICAL | 9.8 | 1.2% | Sep 9, 2020 | In ACCEL-PPP (an implementation of PPTP/PPPoE/L2TP/SSTP), there is a buffer overflow when receiving an l2tp control pack... |
| CVE-2020-25219 | HIGH | 7.5 | 4.3% | Sep 9, 2020 | url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion ... |
| CVE-2020-15903 | CRITICAL | 9.8 | 4.8% | Sep 9, 2020 | An issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in backend scripts that ran ... |
| CVE-2020-24916 | CRITICAL | 9.8 | 17.4% | Sep 9, 2020 | CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection. |
| CVE-2020-24379 | CRITICAL | 9.8 | 3.4% | Sep 9, 2020 | WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection. |
| CVE-2020-1913 | HIGH | 8.1 | 1.2% | Sep 9, 2020 | An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c0... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now