2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14292 | MEDIUM | 5.7 | 1.3% | Sep 9, 2020 | In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connec... |
| CVE-2020-25213 | CRITICAL | 9.8 | 97.3% | Sep 9, 2020 | The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra... |
| CVE-2020-25212 | HIGH | 7 | 0.3% | Sep 9, 2020 | A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt me... |
| CVE-2020-25211 | MEDIUM | 6 | 0.6% | Sep 9, 2020 | In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local... |
| CVE-2020-24566 | HIGH | 7.5 | 1.8% | Sep 9, 2020 | In Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user creates a deployment o... |
| CVE-2020-11986 | CRITICAL | 9.8 | 9.9% | Sep 9, 2020 | To be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans follows this pattern. This... |
| CVE-2020-24794 | MEDIUM | 6.1 | 0.9% | Sep 9, 2020 | Cross Site Scripting (XSS) vulnerability in Kentico before 12.0.75. |
| CVE-2020-24200 | — | — | — | Sep 9, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-24199 | CRITICAL | 9.8 | 3.7% | Sep 9, 2020 | Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows a... |
| CVE-2020-24198 | MEDIUM | 6.1 | 0.8% | Sep 9, 2020 | A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers t... |
| CVE-2020-24195 | CRITICAL | 9.1 | 2.9% | Sep 9, 2020 | An Arbitrary File Upload in the Upload Image component in Sourcecodester Online Bike Rental v1.0 allows authenticated ad... |
| CVE-2020-1749 | HIGH | 7.5 | 1.2% | Sep 9, 2020 | A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tu... |
| CVE-2020-6324 | MEDIUM | 6.1 | 0.9% | Sep 9, 2020 | SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, allo... |
| CVE-2020-6311 | MEDIUM | 6.5 | 1.0% | Sep 9, 2020 | Banking services from SAP 9.0 (Bank Analyzer), version - 500, and SAP S/4HANA for financial products subledger, version ... |
| CVE-2020-24197 | CRITICAL | 9.8 | 1.4% | Sep 9, 2020 | A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute a... |
| CVE-2020-24194 | MEDIUM | 6.1 | 0.8% | Sep 9, 2020 | A Cross-site scripting (XSS) vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remo... |
| CVE-2020-24074 | CRITICAL | 9.8 | 2.0% | Sep 9, 2020 | The decode program in silk-v3-decoder Version:20160922 Build By kn007 does not strictly check data, resulting in a buffe... |
| CVE-2020-1968 | LOW | 3.7 | 4.8% | Sep 9, 2020 | The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-... |
| CVE-2020-14384 | HIGH | 7.5 | 1.4% | Sep 9, 2020 | A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBos... |
| CVE-2020-6361 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE files received from untrusted source... |
| CVE-2020-6360 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources... |
| CVE-2020-6359 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PLT file received from untrusted sources... |
| CVE-2020-6358 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources... |
| CVE-2020-6357 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources... |
| CVE-2020-6356 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now