2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13416 | MEDIUM | 6.5 | 0.5% | May 22, 2020 | An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is no... |
| CVE-2020-13415 | HIGH | 7.5 | 0.7% | May 22, 2020 | An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity... |
| CVE-2020-13414 | HIGH | 7.5 | 1.5% | May 22, 2020 | An issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by the software. |
| CVE-2020-13413 | MEDIUM | 5.3 | 1.4% | May 22, 2020 | An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API,... |
| CVE-2020-13412 | HIGH | 8.8 | 0.6% | May 22, 2020 | An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token ... |
| CVE-2020-12397 | MEDIUM | 4.3 | 0.6% | May 22, 2020 | By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address t... |
| CVE-2020-13398 | HIGH | 8.3 | 2.4% | May 22, 2020 | An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_... |
| CVE-2020-13397 | MEDIUM | 5.5 | 0.5% | May 22, 2020 | An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security... |
| CVE-2020-13396 | HIGH | 7.1 | 2.4% | May 22, 2020 | An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_rea... |
| CVE-2020-13394 | CRITICAL | 9.8 | 2.6% | May 22, 2020 | An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42... |
| CVE-2020-13393 | CRITICAL | 9.8 | 3.3% | May 22, 2020 | An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42... |
| CVE-2020-13392 | CRITICAL | 9.8 | 2.6% | May 22, 2020 | An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42... |
| CVE-2020-13391 | CRITICAL | 9.8 | 2.6% | May 22, 2020 | An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42... |
| CVE-2020-13390 | CRITICAL | 9.8 | 2.6% | May 22, 2020 | An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42... |
| CVE-2020-13389 | CRITICAL | 9.8 | 2.6% | May 22, 2020 | An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42... |
| CVE-2020-13388 | CRITICAL | 9.8 | 4.4% | May 22, 2020 | An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Pyt... |
| CVE-2020-7658 | MEDIUM | 6.1 | 0.7% | May 22, 2020 | meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks mi... |
| CVE-2020-11077 | HIGH | 7.5 | 2.8% | May 22, 2020 | In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a... |
| CVE-2020-11076 | HIGH | 7.5 | 4.1% | May 22, 2020 | In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-enco... |
| CVE-2020-10711 | MEDIUM | 5.9 | 3.1% | May 22, 2020 | A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occu... |
| CVE-2020-8789 | MEDIUM | 5.4 | 0.7% | May 22, 2020 | Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration. |
| CVE-2020-7813 | CRITICAL | 9.8 | 0.7% | May 22, 2020 | Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allo... |
| CVE-2020-6091 | CRITICAL | 9.1 | 2.3% | May 22, 2020 | An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN... |
| CVE-2020-1956 | HIGH | 8.8 | 98.0% | May 22, 2020 | Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the ... |
| CVE-2020-3344 | MEDIUM | 5.5 | 0.3% | May 22, 2020 | A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software c... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now