2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-3345MEDIUM4.3A vulnerability in certain web pages of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthentica...
CVE-2020-3332HIGH8.8A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series R...
CVE-2020-3331CRITICAL9.8A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewall and Cisco RV215W Wireless-...
CVE-2020-3330CRITICAL9.8A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unau...
CVE-2020-3323CRITICAL9.8A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers ...
CVE-2020-3197MEDIUM5.3A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and...
CVE-2020-3180HIGH7.8A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected d...
CVE-2020-3150MEDIUM5.9A vulnerability in the web-based management interface of Cisco Small Business RV110W and RV215W Series Routers could all...
CVE-2020-3146HIGH8.8Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Ro...
CVE-2020-3145HIGH8.8Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Ro...
CVE-2020-3144CRITICAL9.8A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV1...
CVE-2020-3140CRITICAL9.8A vulnerability in the web management interface of Cisco Prime License Manager (PLM) Software could allow an unauthentic...
CVE-2020-4462HIGH8.2IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0,...
CVE-2020-4316MEDIUM4.7IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session cooki...
CVE-2020-15027CRITICAL9.8ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication...
CVE-2020-14000CRITICAL9.8MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted ...
CVE-2020-10288CRITICAL9.8IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and p...
CVE-2020-10287CRITICAL9.8The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manua...
CVE-2020-15780MEDIUM6.7An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI ta...
CVE-2020-15107MEDIUM5.3In openenclave before 0.10.0, enclaves that use x87 FPU operations are vulnerable to tampering by a malicious host appli...
CVE-2020-10286HIGH8.8the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to p...
CVE-2020-9311MEDIUM5.4In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile ...
CVE-2020-9309HIGH8.8Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file ex...
CVE-2020-8958HIGH7.2Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow...
CVE-2020-6165MEDIUM5.3SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set. This aff...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now