2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12680 | MEDIUM | 5.5 | 0.3% | May 8, 2020 | Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user credentials. The functions of the execut... |
| CVE-2020-7266 | HIGH | 8.4 | 0.2% | May 8, 2020 | Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778 ... |
| CVE-2020-7265 | HIGH | 8.4 | 0.3% | May 8, 2020 | Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delet... |
| CVE-2020-7264 | HIGH | 8.4 | 0.3% | May 8, 2020 | Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows lo... |
| CVE-2020-12026 | HIGH | 8.8 | 2.3% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist... |
| CVE-2020-12022 | CRITICAL | 9.8 | 1.7% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could... |
| CVE-2020-12018 | HIGH | 7.5 | 1.5% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow a... |
| CVE-2020-12014 | HIGH | 7.5 | 1.5% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Input is not properly sanitized and may allow an attac... |
| CVE-2020-12010 | HIGH | 7.1 | 1.0% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist... |
| CVE-2020-12006 | CRITICAL | 9.8 | 3.7% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist... |
| CVE-2020-12002 | CRITICAL | 9.8 | 9.1% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple stack-based buffer overflow vulnerabilities e... |
| CVE-2020-10638 | CRITICAL | 9.8 | 7.1% | May 8, 2020 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer overflow vulnerabilities ex... |
| CVE-2020-12735 | CRITICAL | 9.8 | 1.7% | May 8, 2020 | reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover. |
| CVE-2020-12720 | CRITICAL | 9.8 | 88.9% | May 8, 2020 | vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control. |
| CVE-2020-12719 | HIGH | 7.2 | 1.0% | May 8, 2020 | XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager A... |
| CVE-2020-12718 | MEDIUM | 5.4 | 0.7% | May 8, 2020 | In administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take advantage of a stored XSS vulne... |
| CVE-2020-10916 | HIGH | 8 | 1.1% | May 7, 2020 | This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA85... |
| CVE-2020-9475 | HIGH | 7 | 0.3% | May 7, 2020 | The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in log... |
| CVE-2020-9474 | HIGH | 8.8 | 1.9% | May 7, 2020 | The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in ... |
| CVE-2020-11056 | MEDIUM | 6.3 | 1.0% | May 7, 2020 | In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields... |
| CVE-2020-11055 | MEDIUM | 5.4 | 0.8% | May 7, 2020 | In BookStack greater than or equal to 0.18.0 and less than 0.29.2, there is an XSS vulnerability in comment creation. A ... |
| CVE-2020-11054 | LOW | 3.5 | 1.3% | May 7, 2020 | In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificat... |
| CVE-2020-11053 | MEDIUM | 6.1 | 0.8% | May 7, 2020 | In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Users can provide a redirect address for the prox... |
| CVE-2020-11052 | CRITICAL | 9.8 | 1.6% | May 7, 2020 | In Sorcery before 0.15.0, there is a brute force vulnerability when using password authentication via Sorcery. The brute... |
| CVE-2020-11050 | HIGH | 8.1 | 0.8% | May 7, 2020 | In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where W... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now