2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8484 | HIGH | 7.8 | 0.3% | Apr 29, 2020 | Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions... |
| CVE-2020-8481 | CRITICAL | 9.8 | 1.8% | Apr 29, 2020 | For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions... |
| CVE-2020-8479 | CRITICAL | 9.8 | 2.2% | Apr 29, 2020 | For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions ... |
| CVE-2020-8478 | LOW | 3.3 | 0.3% | Apr 29, 2020 | Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M... |
| CVE-2020-8476 | HIGH | 7.5 | 1.5% | Apr 29, 2020 | For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions ... |
| CVE-2020-8475 | HIGH | 7.5 | 1.1% | Apr 29, 2020 | For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions ... |
| CVE-2020-8471 | HIGH | 7.8 | 0.4% | Apr 29, 2020 | For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions ... |
| CVE-2020-12443 | CRITICAL | 9.8 | 3.6% | Apr 29, 2020 | BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value ca... |
| CVE-2020-8473 | HIGH | 7.8 | 0.3% | Apr 29, 2020 | Insufficient folder permissions used by system functions in ABB System 800xA Base (version 6.1 and earlier) allow low pr... |
| CVE-2020-8472 | HIGH | 7.8 | 0.3% | Apr 29, 2020 | Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0... |
| CVE-2020-7453 | MEDIUM | 6 | 0.3% | Apr 29, 2020 | In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE... |
| CVE-2020-7452 | CRITICAL | 9.1 | 1.8% | Apr 29, 2020 | In FreeBSD 12.1-STABLE before r357490, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r357489, and 11.3-RELEASE... |
| CVE-2020-12442 | CRITICAL | 9.8 | 2.3% | Apr 28, 2020 | Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250. |
| CVE-2020-12261 | MEDIUM | 5.4 | 2.6% | Apr 28, 2020 | Open-AudIT 3.3.0 allows an XSS attack after login. |
| CVE-2020-12103 | HIGH | 7.7 | 1.5% | Apr 28, 2020 | In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticate... |
| CVE-2020-12438 | MEDIUM | 5.4 | 0.6% | Apr 28, 2020 | An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only securi... |
| CVE-2020-12102 | HIGH | 7.7 | 1.8% | Apr 28, 2020 | In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionalit... |
| CVE-2020-10663 | HIGH | 7.5 | 6.8% | Apr 28, 2020 | The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an... |
| CVE-2020-7451 | MEDIUM | 5.3 | 1.1% | Apr 28, 2020 | In FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r358740, and 11.3-RELEASE... |
| CVE-2020-12430 | MEDIUM | 6.5 | 2.3% | Apr 28, 2020 | An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A... |
| CVE-2020-12429 | CRITICAL | 9.8 | 2.4% | Apr 28, 2020 | Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and aut... |
| CVE-2020-11014 | HIGH | 8.6 | 1.6% | Apr 28, 2020 | Electron-Cash-SLP before version 3.6.2 has a vulnerability. All token creators that use the "Mint Tool" feature of the E... |
| CVE-2020-9482 | MEDIUM | 6.5 | 2.6% | Apr 28, 2020 | If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Regi... |
| CVE-2020-7644 | HIGH | 8.1 | 1.2% | Apr 28, 2020 | fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modify... |
| CVE-2020-12243 | HIGH | 7.5 | 4.4% | Apr 28, 2020 | In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now