2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8574 | HIGH | 7.8 | 0.4% | Aug 3, 2020 | Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocati... |
| CVE-2020-16272 | CRITICAL | 9.1 | 2.8% | Aug 3, 2020 | The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, w... |
| CVE-2020-16271 | CRITICAL | 9.1 | 1.5% | Aug 3, 2020 | The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows re... |
| CVE-2020-16131 | MEDIUM | 6.1 | 0.7% | Aug 3, 2020 | Tiki before 21.2 allows XSS because [\s\/"\'] is not properly considered in lib/core/TikiFilter/PreventXss.php. |
| CVE-2020-14319 | MEDIUM | 5.9 | 0.3% | Aug 3, 2020 | It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery (CSRF) which is exploitable in ca... |
| CVE-2020-13820 | MEDIUM | 6.1 | 3.5% | Aug 3, 2020 | Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request. |
| CVE-2020-12739 | MEDIUM | 5.3 | 1.9% | Aug 3, 2020 | A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remot... |
| CVE-2020-16269 | MEDIUM | 5.5 | 1.0% | Aug 3, 2020 | radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwa... |
| CVE-2020-4560 | MEDIUM | 6.1 | 0.9% | Aug 3, 2020 | IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed ... |
| CVE-2020-4554 | HIGH | 7.8 | 0.4% | Aug 3, 2020 | IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by ... |
| CVE-2020-4553 | HIGH | 7.8 | 0.4% | Aug 3, 2020 | IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by ... |
| CVE-2020-4552 | HIGH | 7.8 | 0.4% | Aug 3, 2020 | IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory c... |
| CVE-2020-4551 | HIGH | 7.8 | 0.4% | Aug 3, 2020 | IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by ... |
| CVE-2020-4550 | HIGH | 7.8 | 0.4% | Aug 3, 2020 | IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by ... |
| CVE-2020-4549 | HIGH | 7.8 | 0.4% | Aug 3, 2020 | IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory c... |
| CVE-2020-4534 | HIGH | 8.8 | 0.4% | Aug 3, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local authenticated attacker to gain elevated priv... |
| CVE-2020-4377 | CRITICAL | 9.1 | 2.1% | Aug 3, 2020 | IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML dat... |
| CVE-2020-4328 | MEDIUM | 6.3 | 1.2% | Aug 3, 2020 | IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted S... |
| CVE-2020-8108 | HIGH | 8.8 | 0.3% | Aug 3, 2020 | Improper Authentication vulnerability in Bitdefender Endpoint Security for Mac allows an unprivileged process to restart... |
| CVE-2020-14311 | MEDIUM | 6 | 0.5% | Jul 31, 2020 | There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a sy... |
| CVE-2020-14310 | MEDIUM | 6 | 0.5% | Jul 31, 2020 | There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max... |
| CVE-2020-5414 | MEDIUM | 5.7 | 0.7% | Jul 31, 2020 | VMware Tanzu Application Service for VMs (2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x vers... |
| CVE-2020-5413 | CRITICAL | 9.8 | 4.4% | Jul 31, 2020 | Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo... |
| CVE-2020-5396 | HIGH | 8.8 | 1.9% | Jul 31, 2020 | VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.1... |
| CVE-2020-15871 | HIGH | 8.8 | 2.2% | Jul 31, 2020 | Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now