2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5376 | MEDIUM | 6.8 | 0.4% | Sep 2, 2020 | Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacke... |
| CVE-2020-5369 | HIGH | 8.8 | 1.2% | Sep 2, 2020 | Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalat... |
| CVE-2020-8576 | MEDIUM | 5.4 | 0.7% | Sep 2, 2020 | Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when succe... |
| CVE-2020-7830 | HIGH | 7.8 | 0.8% | Sep 2, 2020 | RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lac... |
| CVE-2020-5779 | HIGH | 7.5 | 1.1% | Sep 2, 2020 | A flaw in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) relates to invalid parameter handling when calling strcpy_s... |
| CVE-2020-5778 | HIGH | 7.5 | 1.3% | Sep 2, 2020 | A flaw exists in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) due to improper validation of user-supplied data whe... |
| CVE-2020-25045 | HIGH | 7.8 | 0.4% | Sep 2, 2020 | Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were... |
| CVE-2020-25044 | HIGH | 7.1 | 0.3% | Sep 2, 2020 | Kaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was vulnerable to arbitrary file corruption that could provide an... |
| CVE-2020-25043 | HIGH | 7.1 | 0.3% | Sep 2, 2020 | The installer of Kaspersky VPN Secure Connection prior to 5.0 was vulnerable to arbitrary file deletion that could allow... |
| CVE-2020-4693 | CRITICAL | 9.8 | 2.5% | Sep 2, 2020 | IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to exe... |
| CVE-2020-4546 | MEDIUM | 5.4 | 0.6% | Sep 2, 2020 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed... |
| CVE-2020-4522 | MEDIUM | 5.4 | 0.6% | Sep 2, 2020 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed... |
| CVE-2020-4445 | MEDIUM | 5.4 | 0.6% | Sep 2, 2020 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed... |
| CVE-2020-15167 | HIGH | 8.6 | 0.4% | Sep 2, 2020 | In Miller (command line utility) using the configuration file support introduced in version 5.9.0, it is possible for an... |
| CVE-2020-15094 | HIGH | 8.8 | 3.0% | Sep 2, 2020 | In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on... |
| CVE-2020-25026 | MEDIUM | 4.3 | 0.8% | Sep 2, 2020 | The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows In... |
| CVE-2020-25025 | MEDIUM | 4.3 | 0.8% | Sep 2, 2020 | The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows I... |
| CVE-2020-24654 | LOW | 3.3 | 1.5% | Sep 2, 2020 | In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as de... |
| CVE-2020-24553 | MEDIUM | 6.1 | 3.6% | Sep 2, 2020 | Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a ... |
| CVE-2020-24030 | CRITICAL | 9.8 | 2.7% | Sep 2, 2020 | ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access... |
| CVE-2020-24029 | CRITICAL | 9.8 | 2.0% | Sep 2, 2020 | Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can b... |
| CVE-2020-24028 | HIGH | 8.8 | 2.3% | Sep 2, 2020 | ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, passwor... |
| CVE-2020-23830 | HIGH | 7.1 | 0.5% | Sep 2, 2020 | A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 a... |
| CVE-2020-15811 | MEDIUM | 6.5 | 4.2% | Sep 2, 2020 | An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Splitt... |
| CVE-2020-15810 | MEDIUM | 6.5 | 2.5% | Sep 2, 2020 | An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Smuggl... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now