2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3374 | CRITICAL | 9.9 | 1.9% | Jul 31, 2020 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem... |
| CVE-2020-16166 | LOW | 3.7 | 5.2% | Jul 30, 2020 | The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information a... |
| CVE-2020-16165 | CRITICAL | 9.8 | 1.2% | Jul 30, 2020 | The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to t... |
| CVE-2020-7205 | MEDIUM | 6.7 | 0.4% | Jul 30, 2020 | A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and H... |
| CVE-2020-16164 | HIGH | 7.4 | 0.9% | Jul 30, 2020 | An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. It allows remote attackers to bypas... |
| CVE-2020-16163 | CRITICAL | 9.1 | 1.3% | Jul 30, 2020 | An issue was discovered in RIPE NCC RPKI Validator 3.x before 3.1-2020.07.06.14.28. RRDP fetches proceed even with a lac... |
| CVE-2020-16162 | HIGH | 7.5 | 0.7% | Jul 30, 2020 | An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. Missing validation checks on CRL pr... |
| CVE-2020-15129 | MEDIUM | 4.7 | 8.2% | Jul 30, 2020 | In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik... |
| CVE-2020-16157 | MEDIUM | 5.4 | 14.4% | Jul 30, 2020 | A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu. |
| CVE-2020-15131 | HIGH | 7.5 | 1.0% | Jul 30, 2020 | In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive validation o... |
| CVE-2020-15130 | HIGH | 7.5 | 1.0% | Jul 30, 2020 | In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outcomes for t... |
| CVE-2020-7829 | HIGH | 7.8 | 1.2% | Jul 30, 2020 | DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malform... |
| CVE-2020-7828 | HIGH | 7.8 | 1.2% | Jul 30, 2020 | DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malform... |
| CVE-2020-7827 | HIGH | 7.8 | 1.3% | Jul 30, 2020 | DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed sp... |
| CVE-2020-15957 | HIGH | 7.5 | 1.6% | Jul 30, 2020 | An issue was discovered in DP3T-Backend-SDK before 1.1.1 for Decentralised Privacy-Preserving Proximity Tracing (DP3T). ... |
| CVE-2020-15511 | MEDIUM | 5.3 | 0.9% | Jul 30, 2020 | HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user registration even when ... |
| CVE-2020-14162 | HIGH | 7.8 | 0.6% | Jul 30, 2020 | An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core s... |
| CVE-2020-14158 | CRITICAL | 9.1 | 1.8% | Jul 30, 2020 | The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity ... |
| CVE-2020-12620 | HIGH | 7.8 | 1.5% | Jul 30, 2020 | Pi-hole 4.4 allows a user able to write to /etc/pihole/dns-servers.conf to escalate privileges through command injection... |
| CVE-2020-8222 | MEDIUM | 6.8 | 2.3% | Jul 30, 2020 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the admi... |
| CVE-2020-8221 | MEDIUM | 4.9 | 2.3% | Jul 30, 2020 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbi... |
| CVE-2020-8220 | MEDIUM | 6.5 | 2.5% | Jul 30, 2020 | A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform... |
| CVE-2020-8219 | HIGH | 7.2 | 2.2% | Jul 30, 2020 | An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change t... |
| CVE-2020-8218 | HIGH | 7.2 | 32.7% | Jul 30, 2020 | A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform... |
| CVE-2020-8217 | MEDIUM | 5.4 | 1.4% | Jul 30, 2020 | A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used f... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now