2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15870 | MEDIUM | 6.1 | 0.7% | Jul 31, 2020 | Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2). |
| CVE-2020-15869 | MEDIUM | 5.4 | 0.7% | Jul 31, 2020 | Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2). |
| CVE-2020-5384 | HIGH | 8.4 | 0.4% | Jul 31, 2020 | Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerabil... |
| CVE-2020-15134 | HIGH | 8.7 | 0.9% | Jul 31, 2020 | Faye before version 1.4.0, there is a lack of certification validation in TLS handshakes. Faye uses em-http-request and ... |
| CVE-2020-15133 | HIGH | 8.7 | 0.9% | Jul 31, 2020 | In faye-websocket before version 0.11.0, there is a lack of certification validation in TLS handshakes. The `Faye::WebSo... |
| CVE-2020-15128 | MEDIUM | 6.3 | 0.7% | Jul 31, 2020 | In OctoberCMS before version 1.0.468, encrypted cookie values were not tied to the name of the cookie the value belonged... |
| CVE-2020-12081 | HIGH | 7.5 | 1.1% | Jul 31, 2020 | An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal l... |
| CVE-2020-16136 | HIGH | 7.7 | 2.1% | Jul 31, 2020 | In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the... |
| CVE-2020-9249 | MEDIUM | 6.5 | 0.3% | Jul 31, 2020 | HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of service vulnerability. A mod... |
| CVE-2020-9248 | MEDIUM | 6.7 | 0.2% | Jul 31, 2020 | Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly an... |
| CVE-2020-14520 | HIGH | 7.5 | 1.2% | Jul 31, 2020 | The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information o... |
| CVE-2020-14337 | MEDIUM | 5.8 | 1.5% | Jul 31, 2020 | A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw a... |
| CVE-2020-14334 | HIGH | 8.8 | 0.3% | Jul 31, 2020 | A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials co... |
| CVE-2020-10731 | CRITICAL | 9.9 | 0.9% | Jul 31, 2020 | A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SEL... |
| CVE-2020-3681 | CRITICAL | 9.8 | 0.7% | Jul 31, 2020 | Authenticated and encrypted payload MMEs can be forged and remotely sent to any HPAV2 system using a jailbreak key recov... |
| CVE-2020-3462 | MEDIUM | 6.3 | 0.7% | Jul 31, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authent... |
| CVE-2020-3461 | MEDIUM | 5.3 | 1.2% | Jul 31, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe... |
| CVE-2020-3460 | MEDIUM | 6.1 | 0.7% | Jul 31, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe... |
| CVE-2020-3386 | HIGH | 8.8 | 2.0% | Jul 31, 2020 | A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remot... |
| CVE-2020-3384 | HIGH | 8.2 | 0.8% | Jul 31, 2020 | A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated,... |
| CVE-2020-3383 | HIGH | 8.8 | 7.0% | Jul 31, 2020 | A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote ... |
| CVE-2020-3382 | CRITICAL | 9.8 | 2.3% | Jul 31, 2020 | A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attac... |
| CVE-2020-3377 | HIGH | 8.8 | 1.0% | Jul 31, 2020 | A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticat... |
| CVE-2020-3376 | CRITICAL | 9.8 | 1.2% | Jul 31, 2020 | A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthentic... |
| CVE-2020-3375 | CRITICAL | 9.8 | 3.9% | Jul 31, 2020 | A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer over... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now