2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15477 | CRITICAL | 9.8 | 5.0% | Jul 23, 2020 | The WebControl in RaspberryTortoise through 2012-10-28 is vulnerable to remote code execution via shell metacharacters i... |
| CVE-2020-15391 | CRITICAL | 9.8 | 2.7% | Jul 23, 2020 | The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authe... |
| CVE-2020-11623 | MEDIUM | 6.8 | 0.4% | Jul 23, 2020 | An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Ind... |
| CVE-2020-15917 | CRITICAL | 9.8 | 2.6% | Jul 23, 2020 | common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled. |
| CVE-2020-15916 | CRITICAL | 9.8 | 3.4% | Jul 23, 2020 | goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system... |
| CVE-2020-8557 | MEDIUM | 5.5 | 0.5% | Jul 23, 2020 | The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage ... |
| CVE-2020-4447 | MEDIUM | 5.4 | 0.6% | Jul 23, 2020 | IBM FileNet Content Manager 5.5.3 and 5.5.4 is vulnerable to cross-site scripting. This vulnerability allows users to em... |
| CVE-2020-12638 | MEDIUM | 6.8 | 0.5% | Jul 23, 2020 | An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.... |
| CVE-2020-10922 | HIGH | 7.5 | 3.7% | Jul 23, 2020 | This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE H... |
| CVE-2020-10921 | CRITICAL | 9.8 | 2.8% | Jul 23, 2020 | This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware versio... |
| CVE-2020-10920 | CRITICAL | 9.8 | 4.9% | Jul 23, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-MORE HMI EA9 Firmwar... |
| CVE-2020-10919 | MEDIUM | 5.9 | 1.6% | Jul 23, 2020 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9... |
| CVE-2020-10918 | HIGH | 7.5 | 2.7% | Jul 23, 2020 | This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware... |
| CVE-2020-15912 | MEDIUM | 6.5 | 1.2% | Jul 23, 2020 | Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC ... |
| CVE-2020-15887 | HIGH | 8.8 | 1.3% | Jul 23, 2020 | A SQL injection vulnerability in softwareupdate_controller.php in the Software Update module before 1.6 for MunkiReport ... |
| CVE-2020-15886 | HIGH | 8.8 | 1.3% | Jul 23, 2020 | A SQL injection vulnerability in reportdata_controller.php in the reportdata module before 3.5 for MunkiReport allows at... |
| CVE-2020-15885 | MEDIUM | 5.4 | 0.9% | Jul 23, 2020 | A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to i... |
| CVE-2020-15884 | HIGH | 8.8 | 1.2% | Jul 23, 2020 | A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL co... |
| CVE-2020-15883 | MEDIUM | 6.1 | 1.2% | Jul 23, 2020 | A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attack... |
| CVE-2020-15882 | HIGH | 8.1 | 0.6% | Jul 23, 2020 | A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines fr... |
| CVE-2020-15881 | MEDIUM | 6.1 | 1.2% | Jul 23, 2020 | A Cross-Site Scripting (XSS) vulnerability in the munki_facts (aka Munki Conditions) module before 1.5 for MunkiReport a... |
| CVE-2020-11440 | HIGH | 7.5 | 1.1% | Jul 23, 2020 | httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root. |
| CVE-2020-15688 | HIGH | 8.8 | 4.0% | Jul 23, 2020 | The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks... |
| CVE-2020-15908 | HIGH | 7.5 | 1.7% | Jul 23, 2020 | tar/TarFileReader.cpp in Cauldron cbang (aka C-Bang or C!) before 1.6.0 allows Directory Traversal during extraction fro... |
| CVE-2020-15904 | HIGH | 7.8 | 1.1% | Jul 22, 2020 | A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to write to heap memory (beyond all... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now