2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10795 | HIGH | 7.2 | 3.8% | May 7, 2020 | Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web... |
| CVE-2020-10794 | CRITICAL | 9.8 | 1.4% | May 7, 2020 | Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the appl... |
| CVE-2020-10176 | CRITICAL | 9.8 | 2.3% | May 7, 2020 | ASSA ABLOY Yale WIPC-301W 2.x.2.29 through 2.x.2.43_p1 devices allow Eval Injection of commands. |
| CVE-2020-4430 | MEDIUM | 4.3 | 68.5% | May 7, 2020 | IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories... |
| CVE-2020-4429 | CRITICAL | 9.8 | 71.4% | May 7, 2020 | IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrativ... |
| CVE-2020-4428 | CRITICAL | 9.1 | 61.7% | May 7, 2020 | IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary co... |
| CVE-2020-4427 | CRITICAL | 9.8 | 70.0% | May 7, 2020 | IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security rest... |
| CVE-2020-12708 | MEDIUM | 6.1 | 0.9% | May 7, 2020 | Multiple cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web scrip... |
| CVE-2020-12707 | MEDIUM | 6.1 | 1.2% | May 7, 2020 | An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited because the only secur... |
| CVE-2020-12706 | MEDIUM | 5.4 | 2.9% | May 7, 2020 | Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web scrip... |
| CVE-2020-12705 | MEDIUM | 6.1 | 0.6% | May 7, 2020 | Multiple cross-site scripting (XSS) vulnerabilities exist in LeptonCMS before 4.6.0. |
| CVE-2020-12704 | MEDIUM | 6.1 | 1.2% | May 7, 2020 | UliCMS before 2020.2 has PageController stored XSS. |
| CVE-2020-12703 | MEDIUM | 6.1 | 0.6% | May 7, 2020 | UliCMS before 2020.2 has XSS during PackageController uninstall. |
| CVE-2020-12116 | HIGH | 7.5 | 97.4% | May 7, 2020 | Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attack... |
| CVE-2020-11049 | LOW | 2.2 | 1.5% | May 7, 2020 | In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the prot... |
| CVE-2020-11048 | LOW | 2.2 | 1.8% | May 7, 2020 | In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extrac... |
| CVE-2020-11047 | MEDIUM | 5.9 | 1.7% | May 7, 2020 | In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bounds read in autodetect_recv_bandwidth_measure_results. A ma... |
| CVE-2020-11046 | LOW | 2.2 | 1.3% | May 7, 2020 | In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead t... |
| CVE-2020-11045 | LOW | 3.3 | 1.7% | May 7, 2020 | In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client me... |
| CVE-2020-11044 | LOW | 2.2 | 1.9% | May 7, 2020 | In FreeRDP greater than 1.2 and before 2.0.0, a double free in update_read_cache_bitmap_v3_order crashes the client appl... |
| CVE-2020-11042 | MEDIUM | 5.9 | 1.8% | May 7, 2020 | In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. It allows reading... |
| CVE-2020-7805 | CRITICAL | 9.8 | 2.6% | May 7, 2020 | An issue was discovered on KT Slim egg IML500 (R7283, R8112, R8424) and IML520 (R8112, R8368, R8411) wifi device. This i... |
| CVE-2020-7803 | HIGH | 8.8 | 1.2% | May 7, 2020 | IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donw... |
| CVE-2020-10974 | HIGH | 7.5 | 1.7% | May 7, 2020 | An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the... |
| CVE-2020-10973 | HIGH | 7.5 | 7.8% | May 7, 2020 | An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/Ex... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now