2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7503 | HIGH | 8.8 | 0.6% | Jun 16, 2020 | A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) whi... |
| CVE-2020-7502 | HIGH | 7.5 | 1.5% | Jun 16, 2020 | A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (Firmware version 4.3 and prior), w... |
| CVE-2020-7501 | HIGH | 8.8 | 1.1% | Jun 16, 2020 | A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 16 and prior) and Vij... |
| CVE-2020-7500 | CRITICAL | 9.8 | 1.9% | Jun 16, 2020 | A CWE-89:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in U.... |
| CVE-2020-7499 | MEDIUM | 6.5 | 0.8% | Jun 16, 2020 | A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels (affected versions listed i... |
| CVE-2020-7498 | CRITICAL | 9.8 | 1.4% | Jun 16, 2020 | A CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader Software (all versions).... |
| CVE-2020-7497 | CRITICAL | 9.8 | 2.3% | Jun 16, 2020 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStru... |
| CVE-2020-7496 | HIGH | 7.8 | 0.9% | Jun 16, 2020 | A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pa... |
| CVE-2020-7495 | MEDIUM | 5.5 | 0.9% | Jun 16, 2020 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file e... |
| CVE-2020-7494 | HIGH | 7.8 | 1.3% | Jun 16, 2020 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStru... |
| CVE-2020-7493 | HIGH | 7.8 | 1.1% | Jun 16, 2020 | A CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in E... |
| CVE-2020-7492 | MEDIUM | 6.5 | 1.1% | Jun 16, 2020 | A CWE-521: Weak Password Requirements vulnerability exists in the GP-Pro EX V1.00 to V4.09.100 which could cause the dis... |
| CVE-2020-13162 | HIGH | 7 | 0.8% | Jun 16, 2020 | A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down ... |
| CVE-2020-14199 | MEDIUM | 6.5 | 0.8% | Jun 16, 2020 | BIP-143 in the Bitcoin protocol specification mishandles the signing of a Segwit transaction, which allows attackers to ... |
| CVE-2020-10268 | MEDIUM | 6.1 | 0.3% | Jun 16, 2020 | Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After t... |
| CVE-2020-14195 | HIGH | 8.1 | 4.5% | Jun 16, 2020 | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-9522 | MEDIUM | 6.1 | 0.6% | Jun 16, 2020 | Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, Affecting ve... |
| CVE-2020-9296 | CRITICAL | 9.8 | 2.0% | Jun 16, 2020 | Netflix Titus uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violatio... |
| CVE-2020-8544 | MEDIUM | 6.5 | 1.1% | Jun 16, 2020 | OX App Suite through 7.10.3 allows SSRF. |
| CVE-2020-8543 | HIGH | 7.5 | 2.0% | Jun 16, 2020 | OX App Suite through 7.10.3 has Improper Input Validation. |
| CVE-2020-8542 | MEDIUM | 5.4 | 1.2% | Jun 16, 2020 | OX App Suite through 7.10.3 allows XSS. |
| CVE-2020-8541 | MEDIUM | 6.5 | 1.0% | Jun 16, 2020 | OX App Suite through 7.10.3 allows XXE attacks. |
| CVE-2020-4320 | MEDIUM | 6.5 | 0.8% | Jun 16, 2020 | IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients base... |
| CVE-2020-4310 | HIGH | 7.5 | 1.7% | Jun 16, 2020 | IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to a... |
| CVE-2020-12494 | MEDIUM | 5.3 | 1.0% | Jun 16, 2020 | Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implement... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now