2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11622 | HIGH | 7.5 | 1.3% | Jun 10, 2020 | A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below... |
| CVE-2020-10705 | HIGH | 7.5 | 1.2% | Jun 10, 2020 | A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-con... |
| CVE-2020-13906 | HIGH | 7.8 | 1.1% | Jun 10, 2020 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7. |
| CVE-2020-13905 | HIGH | 8.8 | 3.2% | Jun 10, 2020 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4. |
| CVE-2020-13445 | HIGH | 8.8 | 3.7% | Jun 10, 2020 | In Liferay Portal before 7.3.2 and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 6... |
| CVE-2020-13444 | MEDIUM | 6.5 | 1.6% | Jun 10, 2020 | Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack... |
| CVE-2020-13223 | HIGH | 7.5 | 1.2% | Jun 10, 2020 | HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials.... |
| CVE-2020-12757 | CRITICAL | 9.8 | 1.5% | Jun 10, 2020 | HashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, when configured with the GCP Secrets Engine, may incorrectly gener... |
| CVE-2020-2033 | MEDIUM | 5.3 | 0.8% | Jun 10, 2020 | When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can di... |
| CVE-2020-2032 | HIGH | 7 | 0.2% | Jun 10, 2020 | A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to ex... |
| CVE-2020-2029 | HIGH | 7.2 | 1.8% | Jun 10, 2020 | An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to exec... |
| CVE-2020-2028 | HIGH | 7.2 | 1.8% | Jun 10, 2020 | An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitra... |
| CVE-2020-2027 | HIGH | 7.2 | 2.1% | Jun 10, 2020 | A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrato... |
| CVE-2020-2026 | HIGH | 8.8 | 0.5% | Jun 10, 2020 | A malicious guest compromised before a container creation (e.g. a malicious guest image or a guest running multiple cont... |
| CVE-2020-2023 | MEDIUM | 6.3 | 1.1% | Jun 10, 2020 | Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can ... |
| CVE-2020-14012 | MEDIUM | 5.4 | 0.5% | Jun 10, 2020 | scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker... |
| CVE-2020-14010 | MEDIUM | 6.1 | 0.9% | Jun 10, 2020 | The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q (aka name) parame... |
| CVE-2020-11798 | MEDIUM | 5.3 | 45.2% | Jun 10, 2020 | A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before ... |
| CVE-2020-0121 | MEDIUM | 5.5 | 0.3% | Jun 10, 2020 | In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead... |
| CVE-2020-0119 | MEDIUM | 5.3 | 0.7% | Jun 10, 2020 | In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle att... |
| CVE-2020-0118 | HIGH | 7.8 | 0.2% | Jun 10, 2020 | In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. Th... |
| CVE-2020-0117 | CRITICAL | 9.8 | 1.6% | Jun 10, 2020 | In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remot... |
| CVE-2020-0116 | MEDIUM | 5.5 | 0.2% | Jun 10, 2020 | In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a... |
| CVE-2020-0115 | HIGH | 7.8 | 0.2% | Jun 10, 2020 | In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to bec... |
| CVE-2020-0114 | HIGH | 7.8 | 0.3% | Jun 10, 2020 | In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now