2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14039 | MEDIUM | 5.3 | 1.8% | Jul 17, 2020 | In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU re... |
| CVE-2020-14001 | CRITICAL | 9.8 | 4.5% | Jul 17, 2020 | The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows ... |
| CVE-2020-4464 | HIGH | 8.8 | 13.2% | Jul 17, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary c... |
| CVE-2020-7696 | MEDIUM | 5.3 | 1.6% | Jul 17, 2020 | This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "... |
| CVE-2020-7684 | CRITICAL | 9.8 | 1.5% | Jul 17, 2020 | This affects all versions of package rollup-plugin-serve. There is no path sanitization in readFile operation. |
| CVE-2020-15803 | MEDIUM | 6.1 | 32.3% | Jul 17, 2020 | Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stor... |
| CVE-2020-15801 | CRITICAL | 9.8 | 3.5% | Jul 17, 2020 | In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from ar... |
| CVE-2020-9688 | HIGH | 7.8 | 4.8% | Jul 17, 2020 | Adobe Download Manager version 2.0.0.518 have a command injection vulnerability. Successful exploitation could lead to a... |
| CVE-2020-9682 | CRITICAL | 9.8 | 4.3% | Jul 17, 2020 | Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful... |
| CVE-2020-9673 | HIGH | 7.8 | 1.0% | Jul 17, 2020 | Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll searc... |
| CVE-2020-9672 | HIGH | 7.8 | 1.0% | Jul 17, 2020 | Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll searc... |
| CVE-2020-9671 | CRITICAL | 9.8 | 4.0% | Jul 17, 2020 | Adobe Creative Cloud Desktop Application versions 5.1 and earlier have an insecure file permissions vulnerability. Succe... |
| CVE-2020-9670 | CRITICAL | 9.8 | 3.6% | Jul 17, 2020 | Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful... |
| CVE-2020-9669 | CRITICAL | 9.8 | 3.4% | Jul 17, 2020 | Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability. Succ... |
| CVE-2020-9650 | HIGH | 7.8 | 3.3% | Jul 17, 2020 | Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could l... |
| CVE-2020-9649 | MEDIUM | 5.5 | 2.6% | Jul 17, 2020 | Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could le... |
| CVE-2020-9646 | HIGH | 7.8 | 3.2% | Jul 17, 2020 | Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could l... |
| CVE-2020-9485 | MEDIUM | 6.1 | 2.0% | Jul 17, 2020 | An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart ... |
| CVE-2020-11983 | MEDIUM | 5.4 | 1.3% | Jul 17, 2020 | An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management scr... |
| CVE-2020-11982 | CRITICAL | 9.8 | 7.2% | Jul 17, 2020 | An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to ... |
| CVE-2020-11981 | CRITICAL | 9.8 | 34.0% | Jul 17, 2020 | An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect t... |
| CVE-2020-11978 | HIGH | 8.8 | 99.1% | Jul 17, 2020 | An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was disco... |
| CVE-2020-12015 | HIGH | 7.5 | 2.0% | Jul 16, 2020 | A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to i... |
| CVE-2020-12013 | CRITICAL | 9.1 | 3.0% | Jul 16, 2020 | A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely... |
| CVE-2020-12007 | CRITICAL | 9.8 | 3.9% | Jul 16, 2020 | A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now