2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13173 | HIGH | 7.8 | 0.2% | May 28, 2020 | Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent fo... |
| CVE-2020-11082 | MEDIUM | 6.1 | 1.5% | May 28, 2020 | In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with... |
| CVE-2020-5357 | MEDIUM | 6 | 0.3% | May 28, 2020 | Dell Dock Firmware Update Utilities for Dell Client Consumer and Commercial docking stations contain an Arbitrary File O... |
| CVE-2020-13660 | MEDIUM | 4.8 | 0.7% | May 28, 2020 | CMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name. |
| CVE-2020-13245 | MEDIUM | 5.9 | 0.5% | May 28, 2020 | Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.... |
| CVE-2020-11079 | CRITICAL | 9.8 | 2.6% | May 28, 2020 | node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote... |
| CVE-2020-8330 | HIGH | 7.5 | 1.5% | May 28, 2020 | A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN tha... |
| CVE-2020-8329 | HIGH | 7.5 | 1.5% | May 28, 2020 | A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN tha... |
| CVE-2020-4248 | LOW | 2.7 | 1.0% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information wh... |
| CVE-2020-4419 | MEDIUM | 5.4 | 0.6% | May 28, 2020 | IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows user... |
| CVE-2020-4249 | MEDIUM | 6.5 | 0.9% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticat... |
| CVE-2020-4246 | HIGH | 7.1 | 1.4% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack w... |
| CVE-2020-4245 | HIGH | 7.5 | 1.2% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by defa... |
| CVE-2020-4244 | MEDIUM | 5.3 | 1.1% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 could allow an unauthorized user to obtain sensitive information... |
| CVE-2020-4233 | MEDIUM | 5.3 | 0.8% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, c... |
| CVE-2020-4232 | HIGH | 7.5 | 1.1% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid log... |
| CVE-2020-4231 | MEDIUM | 6.5 | 0.8% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 could allow an authenticated user to perform unauthorized comman... |
| CVE-2020-13649 | HIGH | 7.5 | 2.1% | May 28, 2020 | parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated b... |
| CVE-2020-13362 | LOW | 3.2 | 0.4% | May 28, 2020 | In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue... |
| CVE-2020-7812 | CRITICAL | 9.8 | 0.7% | May 28, 2020 | Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allo... |
| CVE-2020-13361 | LOW | 3.9 | 0.4% | May 28, 2020 | In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which ... |
| CVE-2020-11950 | HIGH | 8.8 | 2.7% | May 28, 2020 | VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user... |
| CVE-2020-11949 | MEDIUM | 6.5 | 1.2% | May 28, 2020 | testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXX... |
| CVE-2020-13645 | MEDIUM | 6.5 | 1.9% | May 28, 2020 | In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the s... |
| CVE-2020-13644 | MEDIUM | 5.4 | 0.8% | May 28, 2020 | An issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX wp_ajax_accordions_ajax... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now