2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-16201 | LOW | 3.3 | 1.4% | Aug 4, 2020 | Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilitie... |
| CVE-2020-16199 | HIGH | 7.8 | 10.2% | Aug 4, 2020 | Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer overflow vulne... |
| CVE-2020-16134 | HIGH | 8 | 0.8% | Aug 4, 2020 | An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet... |
| CVE-2020-13523 | LOW | 3.3 | 0.5% | Aug 4, 2020 | An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver. A specially c... |
| CVE-2020-4631 | MEDIUM | 5.5 | 0.2% | Aug 4, 2020 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned acce... |
| CVE-2020-4542 | MEDIUM | 5.4 | 0.6% | Aug 4, 2020 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users... |
| CVE-2020-4525 | MEDIUM | 5.4 | 0.6% | Aug 4, 2020 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users... |
| CVE-2020-4459 | CRITICAL | 9.8 | 1.0% | Aug 4, 2020 | IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses ... |
| CVE-2020-4410 | MEDIUM | 4.3 | 1.0% | Aug 4, 2020 | IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET ... |
| CVE-2020-4396 | MEDIUM | 5.4 | 0.6% | Aug 4, 2020 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users... |
| CVE-2020-7823 | HIGH | 7.8 | 1.2% | Aug 4, 2020 | DaviewIndy has a Memory corruption vulnerability, triggered when the user opens a malformed image file that is mishandle... |
| CVE-2020-7822 | HIGH | 7.8 | 1.2% | Aug 4, 2020 | DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed image file that is mishand... |
| CVE-2020-6012 | HIGH | 7.4 | 0.5% | Aug 4, 2020 | ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sop... |
| CVE-2020-15467 | HIGH | 8.8 | 3.2% | Aug 4, 2020 | The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticat... |
| CVE-2020-5617 | HIGH | 7.8 | 0.3% | Aug 4, 2020 | Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unaut... |
| CVE-2020-5616 | CRITICAL | 9.8 | 3.1% | Aug 4, 2020 | [Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Cale... |
| CVE-2020-5615 | HIGH | 8.8 | 0.7% | Aug 4, 2020 | Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1... |
| CVE-2020-11584 | MEDIUM | 6.1 | 0.9% | Aug 3, 2020 | A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary Ja... |
| CVE-2020-11583 | MEDIUM | 6.1 | 1.0% | Aug 3, 2020 | A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrar... |
| CVE-2020-5773 | HIGH | 8.8 | 1.0% | Aug 3, 2020 | Improper Access Control in Teltonika firmware TRB2_R_00.02.04.01 allows a low privileged user to perform unauthorized wr... |
| CVE-2020-5772 | HIGH | 7.5 | 1.1% | Aug 3, 2020 | Improper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated attacker to gain root ... |
| CVE-2020-5771 | HIGH | 7.5 | 2.0% | Aug 3, 2020 | Improper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated attacker to gain root ... |
| CVE-2020-5770 | HIGH | 8.8 | 0.7% | Aug 3, 2020 | Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.01 allows a remote attacker to perform sensitive applic... |
| CVE-2020-16116 | LOW | 3.3 | 1.7% | Aug 3, 2020 | In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory vi... |
| CVE-2020-8575 | MEDIUM | 4.4 | 0.3% | Aug 3, 2020 | Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to a vulnerability which ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now