2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0532 | HIGH | 7.1 | 0.6% | Jun 15, 2020 | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allo... |
| CVE-2020-0531 | MEDIUM | 6.5 | 1.4% | Jun 15, 2020 | Improper input validation in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authentic... |
| CVE-2020-0529 | HIGH | 7.8 | 0.3% | Jun 15, 2020 | Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow... |
| CVE-2020-0528 | HIGH | 7.8 | 0.3% | Jun 15, 2020 | Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families... |
| CVE-2020-0527 | MEDIUM | 4.4 | 0.3% | Jun 15, 2020 | Insufficient control flow management in firmware for some Intel(R) Data Center SSDs may allow a privileged user to poten... |
| CVE-2020-14076 | HIGH | 8.8 | 2.6% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
| CVE-2020-14093 | MEDIUM | 5.9 | 2.1% | Jun 15, 2020 | Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response. |
| CVE-2020-14081 | HIGH | 8.8 | 2.2% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action send_log_ema... |
| CVE-2020-14080 | CRITICAL | 9.8 | 2.4% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
| CVE-2020-14079 | HIGH | 8.8 | 2.2% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
| CVE-2020-14078 | HIGH | 8.8 | 1.8% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
| CVE-2020-14077 | HIGH | 8.8 | 1.8% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
| CVE-2020-14075 | HIGH | 8.8 | 3.1% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connec... |
| CVE-2020-14074 | HIGH | 8.8 | 1.8% | Jun 15, 2020 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
| CVE-2020-14067 | CRITICAL | 9.8 | 1.2% | Jun 15, 2020 | The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files with... |
| CVE-2020-14060 | HIGH | 8.1 | 8.6% | Jun 14, 2020 | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-14062 | HIGH | 8.1 | 8.1% | Jun 14, 2020 | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-14061 | HIGH | 8.1 | 4.5% | Jun 14, 2020 | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-13656 | CRITICAL | 9.8 | 2.1% | Jun 12, 2020 | In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an... |
| CVE-2020-11839 | MEDIUM | 6.1 | 0.6% | Jun 12, 2020 | Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to ... |
| CVE-2020-10752 | HIGH | 7.5 | 1.1% | Jun 12, 2020 | A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into t... |
| CVE-2020-11980 | MEDIUM | 6.3 | 1.9% | Jun 12, 2020 | In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "... |
| CVE-2020-4050 | LOW | 3.1 | 1.7% | Jun 12, 2020 | In affected versions of WordPress, misuse of the `set-screen-option` filter's return value allows arbitrary user meta fi... |
| CVE-2020-4049 | LOW | 2.4 | 2.8% | Jun 12, 2020 | In affected versions of WordPress, when uploading themes, the name of the theme folder can be crafted in a way that coul... |
| CVE-2020-4048 | MEDIUM | 5.7 | 2.3% | Jun 12, 2020 | In affected versions of WordPress, due to an issue in wp_validate_redirect() and URL sanitization, an arbitrary external... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now