2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12766 | CRITICAL | 9.8 | 1.0% | May 9, 2020 | Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter. |
| CVE-2020-12765 | MEDIUM | 5.3 | 1.3% | May 9, 2020 | Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal. |
| CVE-2020-12764 | MEDIUM | 5.3 | 1.3% | May 9, 2020 | Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal. |
| CVE-2020-12762 | HIGH | 7.8 | 1.9% | May 9, 2020 | json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_m... |
| CVE-2020-12761 | CRITICAL | 9.1 | 1.6% | May 9, 2020 | modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-... |
| CVE-2020-12637 | CRITICAL | 9.8 | 0.7% | May 9, 2020 | Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled duri... |
| CVE-2020-12755 | LOW | 3.3 | 0.4% | May 9, 2020 | fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call ev... |
| CVE-2020-11532 | CRITICAL | 9.8 | 77.5% | May 8, 2020 | Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode... |
| CVE-2020-11531 | HIGH | 8.8 | 13.7% | May 8, 2020 | The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the data... |
| CVE-2020-6616 | MEDIUM | 6.5 | 0.7% | May 8, 2020 | Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (P... |
| CVE-2020-11530 | CRITICAL | 9.8 | 95.7% | May 8, 2020 | A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. The vulnerability is introduced in ... |
| CVE-2020-11006 | MEDIUM | 5.4 | 0.6% | May 8, 2020 | In Shopizer before version 2.11.0, a script can be injected in various forms and saved in the database, then executed wh... |
| CVE-2020-12740 | CRITICAL | 9.1 | 1.7% | May 8, 2020 | tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation. The issue is being tri... |
| CVE-2020-12737 | MEDIUM | 6.5 | 1.1% | May 8, 2020 | An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using d... |
| CVE-2020-10690 | MEDIUM | 6.4 | 0.4% | May 8, 2020 | There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cde... |
| CVE-2020-11541 | MEDIUM | 5.5 | 0.3% | May 8, 2020 | In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity (XXE) injection issue exists that would allow a local ... |
| CVE-2020-7291 | HIGH | 7.8 | 0.2% | May 8, 2020 | Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a malicious sc... |
| CVE-2020-7290 | HIGH | 7.8 | 0.2% | May 8, 2020 | Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious ... |
| CVE-2020-7289 | HIGH | 7.8 | 0.3% | May 8, 2020 | Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a maliciou... |
| CVE-2020-7288 | HIGH | 7.8 | 0.2% | May 8, 2020 | Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Mac prior to 3.1.0 Hotfix 1 allows... |
| CVE-2020-7287 | HIGH | 7.8 | 0.2% | May 8, 2020 | Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Linux prior to 3.1.0 Hotfix 1 allo... |
| CVE-2020-7286 | HIGH | 7.8 | 0.2% | May 8, 2020 | Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 al... |
| CVE-2020-7285 | HIGH | 7.8 | 0.2% | May 8, 2020 | Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to... |
| CVE-2020-7267 | HIGH | 8.4 | 0.3% | May 8, 2020 | Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows l... |
| CVE-2020-5741 | HIGH | 7.2 | 72.9% | May 8, 2020 | Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arb... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now