2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4341 | MEDIUM | 5.3 | 1.4% | Jun 24, 2020 | IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical ... |
| CVE-2020-4327 | MEDIUM | 5.3 | 1.1% | Jun 24, 2020 | IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical ... |
| CVE-2020-4323 | MEDIUM | 6.1 | 0.7% | Jun 24, 2020 | IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar... |
| CVE-2020-4322 | MEDIUM | 4.3 | 1.0% | Jun 24, 2020 | IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading... |
| CVE-2020-14007 | MEDIUM | 5.4 | 1.1% | Jun 24, 2020 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an a... |
| CVE-2020-14006 | MEDIUM | 5.4 | 1.1% | Jun 24, 2020 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible ... |
| CVE-2020-14005 | HIGH | 8.8 | 14.3% | Jun 24, 2020 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to ex... |
| CVE-2020-4071 | LOW | 2.4 | 0.4% | Jun 24, 2020 | In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authenticat... |
| CVE-2020-15018 | MEDIUM | 6.5 | 0.9% | Jun 24, 2020 | playSMS through 1.4.3 is vulnerable to session fixation. |
| CVE-2020-15014 | HIGH | 8.8 | 0.5% | Jun 24, 2020 | pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF. |
| CVE-2020-12866 | MEDIUM | 5.7 | 1.0% | Jun 24, 2020 | A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network ... |
| CVE-2020-12865 | HIGH | 8 | 1.5% | Jun 24, 2020 | A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network a... |
| CVE-2020-12864 | MEDIUM | 4.3 | 1.2% | Jun 24, 2020 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as... |
| CVE-2020-12863 | MEDIUM | 4.3 | 1.0% | Jun 24, 2020 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as... |
| CVE-2020-12862 | MEDIUM | 4.3 | 1.1% | Jun 24, 2020 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as... |
| CVE-2020-12861 | HIGH | 8.8 | 3.0% | Jun 24, 2020 | A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as t... |
| CVE-2020-7667 | HIGH | 7.5 | 1.6% | Jun 24, 2020 | In package github.com/sassoftware/go-rpmutils/cpio before version 0.1.0, the CPIO extraction functionality doesn't sanit... |
| CVE-2020-15011 | MEDIUM | 4.3 | 1.9% | Jun 24, 2020 | GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. |
| CVE-2020-15007 | CRITICAL | 9.8 | 2.3% | Jun 24, 2020 | A buffer overflow in the M_LoadDefaults function in m_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execut... |
| CVE-2020-15006 | MEDIUM | 5.4 | 0.5% | Jun 24, 2020 | Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php. |
| CVE-2020-10280 | HIGH | 7.5 | 1.2% | Jun 24, 2020 | The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, eff... |
| CVE-2020-10279 | CRITICAL | 9.8 | 1.0% | Jun 24, 2020 | MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop us... |
| CVE-2020-10278 | MEDIUM | 4.6 | 1.0% | Jun 24, 2020 | The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings suc... |
| CVE-2020-10277 | MEDIUM | 6.4 | 0.4% | Jun 24, 2020 | There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of se... |
| CVE-2020-10276 | CRITICAL | 9.8 | 1.5% | Jun 24, 2020 | The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated progr... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now