2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11902 | HIGH | 7.3 | 9.3% | Jun 17, 2020 | The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read. |
| CVE-2020-11901 | CRITICAL | 9 | 21.1% | Jun 17, 2020 | The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response. |
| CVE-2020-11900 | HIGH | 8.2 | 12.8% | Jun 17, 2020 | The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free. |
| CVE-2020-11899 | MEDIUM | 5.4 | 18.4% | Jun 17, 2020 | The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. |
| CVE-2020-11898 | CRITICAL | 9.1 | 18.7% | Jun 17, 2020 | The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might all... |
| CVE-2020-11897 | CRITICAL | 10 | 9.1% | Jun 17, 2020 | The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets. |
| CVE-2020-11896 | CRITICAL | 10 | 37.0% | Jun 17, 2020 | The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling. |
| CVE-2020-14214 | MEDIUM | 6.5 | 0.7% | Jun 16, 2020 | Zammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address for authorization decis... |
| CVE-2020-14213 | MEDIUM | 5.4 | 0.6% | Jun 16, 2020 | In Zammad before 3.3.1, a Customer has ticket access that should only be available to an Agent (e.g., read internal data... |
| CVE-2020-4054 | HIGH | 7.3 | 1.9% | Jun 16, 2020 | In Sanitize (RubyGem sanitize) greater than or equal to 3.0.0 and less than 5.2.1, there is a cross-site scripting vulne... |
| CVE-2020-4053 | MEDIUM | 6.8 | 1.5% | Jun 16, 2020 | In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plu... |
| CVE-2020-4052 | MEDIUM | 6.1 | 0.8% | Jun 16, 2020 | In Wiki.js before 2.4.107, there is a stored cross-site scripting through template injection. This vulnerability exists ... |
| CVE-2020-14212 | HIGH | 8.8 | 1.7% | Jun 16, 2020 | FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.... |
| CVE-2020-14210 | MEDIUM | 6.1 | 1.0% | Jun 16, 2020 | Reflected Cross-Site Scripting (XSS) vulnerability in MONITORAPP WAF in which script can be executed when responding to ... |
| CVE-2020-9289 | HIGH | 7.5 | 2.2% | Jun 16, 2020 | Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, For... |
| CVE-2020-7513 | HIGH | 7.5 | 0.8% | Jun 16, 2020 | A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy T300 (Firmware version 1.5.2 and o... |
| CVE-2020-7512 | CRITICAL | 9.8 | 1.4% | Jun 16, 2020 | A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 (... |
| CVE-2020-7511 | HIGH | 7.5 | 0.9% | Jun 16, 2020 | A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy T300 (Firmware version 1.5.2... |
| CVE-2020-7510 | HIGH | 7.5 | 1.4% | Jun 16, 2020 | A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allo... |
| CVE-2020-7509 | HIGH | 7.2 | 1.2% | Jun 16, 2020 | A CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older)... |
| CVE-2020-7508 | CRITICAL | 9.8 | 1.4% | Jun 16, 2020 | A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firmware versi... |
| CVE-2020-7507 | HIGH | 7.5 | 1.3% | Jun 16, 2020 | A CWE-400: Uncontrolled Resource Consumption vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) whi... |
| CVE-2020-7506 | HIGH | 7.5 | 1.3% | Jun 16, 2020 | A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an at... |
| CVE-2020-7505 | HIGH | 7.2 | 0.9% | Jun 16, 2020 | A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and olde... |
| CVE-2020-7504 | MEDIUM | 5.3 | 1.3% | Jun 16, 2020 | A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now