2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4318 | MEDIUM | 5.4 | 0.6% | Jul 28, 2020 | IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operation... |
| CVE-2020-4317 | MEDIUM | 5.4 | 0.6% | Jul 28, 2020 | IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operation... |
| CVE-2020-16088 | CRITICAL | 9.8 | 2.4% | Jul 28, 2020 | iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for chec... |
| CVE-2020-12880 | MEDIUM | 5.5 | 0.5% | Jul 27, 2020 | An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8. By m... |
| CVE-2020-12845 | HIGH | 7.5 | 3.2% | Jul 27, 2020 | Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticat... |
| CVE-2020-12460 | CRITICAL | 9.8 | 3.7% | Jul 27, 2020 | OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse ... |
| CVE-2020-10643 | MEDIUM | 5.4 | 1.0% | Jul 27, 2020 | An authenticated remote attacker could use specially crafted URLs to send a victim using PI Vision 2019 mobile to a vuln... |
| CVE-2020-8558 | HIGH | 8.8 | 3.6% | Jul 27, 2020 | The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain ... |
| CVE-2020-1457 | HIGH | 7.8 | 12.3% | Jul 27, 2020 | A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory,... |
| CVE-2020-1425 | HIGH | 7.8 | 9.0% | Jul 27, 2020 | A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory... |
| CVE-2020-10609 | HIGH | 7.5 | 1.5% | Jul 27, 2020 | Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modif... |
| CVE-2020-7017 | MEDIUM | 6.7 | 1.2% | Jul 27, 2020 | In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who i... |
| CVE-2020-7016 | MEDIUM | 4.8 | 1.1% | Jul 27, 2020 | Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a ... |
| CVE-2020-15120 | MEDIUM | 4.9 | 1.0% | Jul 27, 2020 | In "I hate money" before version 4.1.5, an authenticated member of one project can modify and delete members of another ... |
| CVE-2020-15103 | LOW | 3.5 | 1.5% | Jul 27, 2020 | In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. A... |
| CVE-2020-4498 | MEDIUM | 4.4 | 0.3% | Jul 27, 2020 | IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inc... |
| CVE-2020-4408 | MEDIUM | 4.6 | 0.3% | Jul 27, 2020 | The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords duri... |
| CVE-2020-4405 | MEDIUM | 4.3 | 0.9% | Jul 27, 2020 | IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due t... |
| CVE-2020-15593 | HIGH | 7.8 | 0.4% | Jul 27, 2020 | SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses an executable running as a high privileged Win... |
| CVE-2020-15592 | HIGH | 7.5 | 1.9% | Jul 27, 2020 | SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a crafted file. It uses an exec... |
| CVE-2020-9251 | LOW | 2.4 | 0.2% | Jul 27, 2020 | HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have an improper authorization vulnerabil... |
| CVE-2020-9077 | LOW | 3.3 | 0.5% | Jul 27, 2020 | HUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information exposure vulnerability. ... |
| CVE-2020-11110 | MEDIUM | 5.4 | 9.6% | Jul 27, 2020 | Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an a... |
| CVE-2020-7695 | MEDIUM | 5.3 | 1.3% | Jul 27, 2020 | Uvicorn before 0.11.7 is vulnerable to HTTP response splitting. CRLF sequences are not escaped in the value of HTTP head... |
| CVE-2020-7694 | HIGH | 7.5 | 1.3% | Jul 27, 2020 | This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape se... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now