2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13376 | CRITICAL | 9 | 3.5% | Aug 7, 2020 | SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted ... |
| CVE-2020-15138 | HIGH | 7.5 | 2.0% | Aug 7, 2020 | Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that a... |
| CVE-2020-9490 | HIGH | 7.5 | 89.7% | Aug 7, 2020 | Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 reques... |
| CVE-2020-7810 | HIGH | 8.8 | 0.4% | Aug 7, 2020 | hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and ex... |
| CVE-2020-11993 | HIGH | 7.5 | 58.7% | Aug 7, 2020 | Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic e... |
| CVE-2020-11985 | MEDIUM | 5.3 | 5.9% | Aug 7, 2020 | IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip... |
| CVE-2020-11984 | CRITICAL | 9.8 | 90.0% | Aug 7, 2020 | Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE |
| CVE-2020-11852 | HIGH | 8.8 | 1.4% | Aug 7, 2020 | DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting all SMG Appliance runnin... |
| CVE-2020-16636 | — | — | — | Aug 7, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-16168 | MEDIUM | 6.5 | 0.6% | Aug 7, 2020 | Origin Validation Error in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to access... |
| CVE-2020-8026 | HIGH | 7.8 | 0.4% | Aug 7, 2020 | A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSU... |
| CVE-2020-8025 | CRITICAL | 9.3 | 0.5% | Aug 7, 2020 | A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-S... |
| CVE-2020-16227 | HIGH | 7.8 | 1.9% | Aug 7, 2020 | Delta Electronics TPEditor Versions 1.97 and prior. An improper input validation may be exploited by processing a specia... |
| CVE-2020-16225 | HIGH | 7.8 | 2.1% | Aug 7, 2020 | Delta Electronics TPEditor Versions 1.97 and prior. A write-what-where condition may be exploited by processing a specia... |
| CVE-2020-16223 | HIGH | 7.8 | 2.2% | Aug 7, 2020 | Delta Electronics TPEditor Versions 1.97 and prior. A heap-based buffer overflow may be exploited by processing a specia... |
| CVE-2020-16221 | HIGH | 7.8 | 2.2% | Aug 7, 2020 | Delta Electronics TPEditor Versions 1.97 and prior. A stack-based buffer overflow may be exploited by processing a speci... |
| CVE-2020-16219 | HIGH | 7.8 | 2.6% | Aug 7, 2020 | Delta Electronics TPEditor Versions 1.97 and prior. An out-of-bounds read may be exploited by processing specially craft... |
| CVE-2020-15702 | HIGH | 7 | 0.5% | Aug 6, 2020 | TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code.... |
| CVE-2020-15701 | MEDIUM | 5.5 | 0.4% | Aug 6, 2020 | An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of ... |
| CVE-2020-15136 | MEDIUM | 6.5 | 1.6% | Aug 6, 2020 | In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV r... |
| CVE-2020-15114 | HIGH | 7.7 | 1.2% | Aug 6, 2020 | In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery a... |
| CVE-2020-11937 | MEDIUM | 5.5 | 0.5% | Aug 6, 2020 | In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The... |
| CVE-2020-15115 | HIGH | 7.5 | 1.3% | Aug 6, 2020 | etcd before versions 3.3.23 and 3.4.10 does not perform any password length validation, which allows for very short pass... |
| CVE-2020-16229 | HIGH | 7.8 | 2.9% | Aug 6, 2020 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper... |
| CVE-2020-16217 | HIGH | 7.8 | 2.9% | Aug 6, 2020 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing speciall... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now