2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12649 | HIGH | 7.5 | 1.6% | May 5, 2020 | Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths. |
| CVE-2020-10717 | MEDIUM | 6.5 | 0.4% | May 4, 2020 | A potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd) implementation of the QEMU version... |
| CVE-2020-10700 | MEDIUM | 5.3 | 2.0% | May 4, 2020 | A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with th... |
| CVE-2020-10686 | MEDIUM | 4.7 | 0.7% | May 4, 2020 | A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user re... |
| CVE-2020-8896 | MEDIUM | 5.9 | 0.4% | May 4, 2020 | A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 all... |
| CVE-2020-5343 | HIGH | 7.8 | 0.3% | May 4, 2020 | Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecu... |
| CVE-2020-5337 | MEDIUM | 6.1 | 0.8% | May 4, 2020 | RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability. A remote unauthenticated attack... |
| CVE-2020-5336 | MEDIUM | 6.1 | 0.7% | May 4, 2020 | RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability. An unauthenticated attacker could... |
| CVE-2020-5335 | HIGH | 8.8 | 0.5% | May 4, 2020 | RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability. A remote unauthentic... |
| CVE-2020-5334 | MEDIUM | 6.1 | 0.9% | May 4, 2020 | RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting vulner... |
| CVE-2020-5333 | MEDIUM | 4.3 | 0.8% | May 4, 2020 | RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API. A remote ... |
| CVE-2020-5332 | HIGH | 7.2 | 2.2% | May 4, 2020 | RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability. AN authenticated malicious us... |
| CVE-2020-5331 | MEDIUM | 5.5 | 0.7% | May 4, 2020 | RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability. Users’ session informatio... |
| CVE-2020-10622 | HIGH | 7.8 | 0.8% | May 4, 2020 | LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to arbitrary file creation by unauthorize... |
| CVE-2020-10618 | MEDIUM | 5.5 | 0.8% | May 4, 2020 | LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unau... |
| CVE-2020-1732 | MEDIUM | 4.2 | 0.7% | May 4, 2020 | A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identi... |
| CVE-2020-12642 | HIGH | 7.5 | 1.3% | May 4, 2020 | An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resulta... |
| CVE-2020-12109 | HIGH | 8.8 | 74.3% | May 4, 2020 | Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 ... |
| CVE-2020-12641 | CRITICAL | 9.8 | 84.5% | May 4, 2020 | rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in... |
| CVE-2020-12640 | CRITICAL | 9.8 | 6.7% | May 4, 2020 | Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plu... |
| CVE-2020-12111 | HIGH | 8.8 | 8.0% | May 4, 2020 | Certain TP-Link devices allow Command Injection. This affects NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304. |
| CVE-2020-10933 | MEDIUM | 5.3 | 2.6% | May 4, 2020 | An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_... |
| CVE-2020-8792 | MEDIUM | 5.3 | 1.0% | May 4, 2020 | The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has an information-exposure issue. I... |
| CVE-2020-8791 | MEDIUM | 6.5 | 1.0% | May 4, 2020 | The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) allows remote attackers to submit AP... |
| CVE-2020-8790 | CRITICAL | 9.8 | 1.7% | May 4, 2020 | The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now