2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15877 | HIGH | 8.8 | 1.9% | Jul 21, 2020 | An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guar... |
| CVE-2020-15873 | MEDIUM | 6.5 | 2.2% | Jul 21, 2020 | In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST ... |
| CVE-2020-15859 | LOW | 3.3 | 0.4% | Jul 21, 2020 | QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the da... |
| CVE-2020-15866 | CRITICAL | 9.8 | 2.1% | Jul 21, 2020 | mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in vm.c because of incorrec... |
| CVE-2020-12499 | HIGH | 7.3 | 0.4% | Jul 21, 2020 | In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on imp... |
| CVE-2020-12432 | MEDIUM | 6.1 | 0.9% | Jul 21, 2020 | The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a... |
| CVE-2020-4125 | HIGH | 8.1 | 0.4% | Jul 20, 2020 | Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL enviro... |
| CVE-2020-13932 | MEDIUM | 6.1 | 4.3% | Jul 20, 2020 | In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or top... |
| CVE-2020-6103 | CRITICAL | 9.9 | 2.8% | Jul 20, 2020 | An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.... |
| CVE-2020-6102 | CRITICAL | 9.9 | 2.8% | Jul 20, 2020 | An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.... |
| CVE-2020-6101 | CRITICAL | 9.9 | 2.8% | Jul 20, 2020 | An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.... |
| CVE-2020-6100 | CRITICAL | 9.9 | 2.1% | Jul 20, 2020 | An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. A specially... |
| CVE-2020-3442 | MEDIUM | 5.7 | 0.2% | Jul 20, 2020 | The DuoConnect client enables users to establish SSH connections to hosts protected by a DNG instance. When a user initi... |
| CVE-2020-1776 | MEDIUM | 4.3 | 0.9% | Jul 20, 2020 | When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not b... |
| CVE-2020-15852 | HIGH | 7.8 | 0.3% | Jul 20, 2020 | An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attac... |
| CVE-2020-6872 | MEDIUM | 6.1 | 0.7% | Jul 20, 2020 | The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes thr... |
| CVE-2020-6871 | CRITICAL | 9.8 | 1.9% | Jul 20, 2020 | The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the a... |
| CVE-2020-3481 | HIGH | 7.5 | 3.2% | Jul 20, 2020 | A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could a... |
| CVE-2020-15123 | CRITICAL | 9.3 | 3.8% | Jul 20, 2020 | In codecov (npm package) before version 3.7.1 the upload method has a command injection vulnerability. Clients of the co... |
| CVE-2020-15121 | CRITICAL | 9.6 | 1.6% | Jul 20, 2020 | In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the p... |
| CVE-2020-15118 | MEDIUM | 5.4 | 1.1% | Jul 20, 2020 | In Wagtail before versions 2.7.4 and 2.9.3, when a form page type is made available to Wagtail editors through the `wagt... |
| CVE-2020-15111 | MEDIUM | 5.4 | 0.9% | Jul 20, 2020 | In Fiber before version 1.12.6, the filename that is given in c.Attachment() (https://docs.gofiber.io/ctx#attachment) is... |
| CVE-2020-15053 | MEDIUM | 6.1 | 1.8% | Jul 20, 2020 | An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time ... |
| CVE-2020-15052 | HIGH | 7.5 | 2.2% | Jul 20, 2020 | An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alia... |
| CVE-2020-8214 | HIGH | 7.5 | 2.0% | Jul 20, 2020 | A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now