2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5883 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, when a virtual server is configured with H... |
| CVE-2020-5882 | HIGH | 7.5 | 1.0% | Apr 30, 2020 | On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5, and 11.6.1-11.6.5.1, under certain condition... |
| CVE-2020-5881 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition (VE) is configured wi... |
| CVE-2020-5880 | HIGH | 7.1 | 1.3% | Apr 30, 2020 | Om BIG-IP 15.0.0-15.0.1.3 and 14.1.0-14.1.2.3, the restjavad process may expose a way for attackers to upload arbitrary ... |
| CVE-2020-5879 | HIGH | 7.5 | 0.8% | Apr 30, 2020 | On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end serv... |
| CVE-2020-5878 | HIGH | 7.5 | 1.0% | Apr 30, 2020 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel (TMM) may restart on B... |
| CVE-2020-5877 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On BIG-IP 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, malformed input to th... |
| CVE-2020-5876 | HIGH | 8.1 | 0.6% | Apr 30, 2020 | On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exis... |
| CVE-2020-5875 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel (TMM) may gene... |
| CVE-2020-5874 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On BIG-IP APM 15.0.0-15.0.1.2, 14.1.0-14.1.2.3, and 14.0.0-14.0.1, in certain circumstances, an attacker sending specifi... |
| CVE-2020-5873 | HIGH | 7.2 | 1.4% | Apr 30, 2020 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a us... |
| CVE-2020-7136 | CRITICAL | 9.8 | 79.5% | Apr 30, 2020 | A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access... |
| CVE-2020-5872 | HIGH | 7.5 | 1.3% | Apr 30, 2020 | On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardwar... |
| CVE-2020-5871 | HIGH | 7.5 | 1.0% | Apr 30, 2020 | On BIG-IP 14.1.0-14.1.2.3, undisclosed requests can lead to a denial of service (DoS) when sent to BIG-IP HTTP/2 virtual... |
| CVE-2020-11015 | CRITICAL | 9.1 | 0.7% | Apr 30, 2020 | A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC add... |
| CVE-2020-1752 | HIGH | 7 | 0.5% | Apr 30, 2020 | A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was ca... |
| CVE-2020-12050 | HIGH | 7 | 0.3% | Apr 30, 2020 | SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privile... |
| CVE-2020-11652 | MEDIUM | 6.5 | 86.1% | Apr 30, 2020 | An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla... |
| CVE-2020-11651 | CRITICAL | 9.8 | 96.4% | Apr 30, 2020 | An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla... |
| CVE-2020-10691 | MEDIUM | 5.2 | 0.4% | Apr 30, 2020 | An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy col... |
| CVE-2020-6010 | HIGH | 8.8 | 49.2% | Apr 30, 2020 | LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection |
| CVE-2020-6579 | MEDIUM | 6.1 | 0.8% | Apr 30, 2020 | Cross-site scripting (XSS) vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloader_core.p... |
| CVE-2020-12101 | MEDIUM | 4.3 | 2.0% | Apr 30, 2020 | The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's st... |
| CVE-2020-9387 | MEDIUM | 4.3 | 0.7% | Apr 30, 2020 | In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for acc... |
| CVE-2020-12283 | MEDIUM | 6.1 | 1.3% | Apr 30, 2020 | Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now