2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8196 | MEDIUM | 4.3 | 26.3% | Jul 10, 2020 | Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 ... |
| CVE-2020-8195 | MEDIUM | 6.5 | 33.3% | Jul 10, 2020 | Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.1... |
| CVE-2020-8194 | MEDIUM | 6.5 | 10.7% | Jul 10, 2020 | Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14... |
| CVE-2020-8193 | MEDIUM | 6.5 | 88.4% | Jul 10, 2020 | Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 ... |
| CVE-2020-8191 | MEDIUM | 6.1 | 22.9% | Jul 10, 2020 | Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.1... |
| CVE-2020-8190 | HIGH | 7.5 | 1.2% | Jul 10, 2020 | Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.... |
| CVE-2020-8187 | HIGH | 7.5 | 1.9% | Jul 10, 2020 | Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticat... |
| CVE-2020-8186 | CRITICAL | 9.8 | 2.8% | Jul 10, 2020 | A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pas... |
| CVE-2020-8181 | MEDIUM | 4.3 | 0.8% | Jul 10, 2020 | A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars. |
| CVE-2020-13983 | — | — | — | Jul 10, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-14159. Reason: This candidate is a reservation d... |
| CVE-2020-9260 | MEDIUM | 6.5 | 0.3% | Jul 10, 2020 | HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than 1... |
| CVE-2020-9258 | MEDIUM | 5.5 | 0.2% | Jul 10, 2020 | HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerabil... |
| CVE-2020-7815 | CRITICAL | 9.8 | 1.2% | Jul 10, 2020 | XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by settin... |
| CVE-2020-3974 | HIGH | 7.8 | 0.4% | Jul 10, 2020 | VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for... |
| CVE-2020-7814 | CRITICAL | 9.8 | 1.2% | Jul 10, 2020 | RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and ex... |
| CVE-2020-5607 | MEDIUM | 6.1 | 1.2% | Jul 10, 2020 | Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web ... |
| CVE-2020-4305 | HIGH | 8.8 | 4.5% | Jul 9, 2020 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the sy... |
| CVE-2020-4173 | MEDIUM | 4.3 | 0.9% | Jul 9, 2020 | IBM Guardium Activity Insights 10.6 and 11.0 does not set the secure attribute on authorization tokens or session cookie... |
| CVE-2020-15299 | MEDIUM | 6.1 | 47.0% | Jul 9, 2020 | A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remot... |
| CVE-2020-15093 | HIGH | 8.6 | 1.4% | Jul 9, 2020 | The tough library (Rust/crates.io) prior to version 0.7.1 does not properly verify the threshold of cryptographic signat... |
| CVE-2020-15092 | MEDIUM | 4.8 | 1.1% | Jul 9, 2020 | In TimelineJS before version 3.7.0, some user data renders as HTML. An attacker could implement an XSS exploit with mali... |
| CVE-2020-15001 | MEDIUM | 5.3 | 0.6% | Jul 9, 2020 | An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP applicatio... |
| CVE-2020-15000 | MEDIUM | 5.9 | 0.7% | Jul 9, 2020 | A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has three passwords: Admin P... |
| CVE-2020-14171 | MEDIUM | 6.5 | 0.6% | Jul 9, 2020 | Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted repo... |
| CVE-2020-14170 | MEDIUM | 4.3 | 0.8% | Jul 9, 2020 | Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the cont... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now