2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9294 | CRITICAL | 9.8 | 77.8% | Apr 27, 2020 | An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 an... |
| CVE-2020-1952 | CRITICAL | 9.8 | 2.7% | Apr 27, 2020 | An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed ... |
| CVE-2020-12279 | CRITICAL | 9.8 | 5.1% | Apr 27, 2020 | An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that... |
| CVE-2020-12278 | CRITICAL | 9.8 | 5.1% | Apr 27, 2020 | An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exi... |
| CVE-2020-11941 | HIGH | 8.8 | 4.6% | Apr 27, 2020 | An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery. |
| CVE-2020-9488 | LOW | 3.7 | 7.8% | Apr 27, 2020 | Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connectio... |
| CVE-2020-9068 | CRITICAL | 9.8 | 1.1% | Apr 27, 2020 | Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200... |
| CVE-2020-1880 | MEDIUM | 5.5 | 0.5% | Apr 27, 2020 | Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205(C00E202R7P2) have a denial of service vulnerability. ... |
| CVE-2020-9072 | MEDIUM | 6.7 | 0.2% | Apr 27, 2020 | Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authe... |
| CVE-2020-7135 | HIGH | 7.8 | 0.5% | Apr 27, 2020 | A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update /... |
| CVE-2020-1845 | MEDIUM | 6.7 | 0.2% | Apr 27, 2020 | Huawei PCManager product with versions earlier than 10.0.5.53 have a local privilege escalation vulnerability. An authen... |
| CVE-2020-1807 | LOW | 3.5 | 0.2% | Apr 27, 2020 | HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.188(C00E74R3P8) have an improper authorization vulnerabilit... |
| CVE-2020-1806 | HIGH | 7.1 | 0.6% | Apr 27, 2020 | Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities.... |
| CVE-2020-1805 | HIGH | 7.1 | 0.6% | Apr 27, 2020 | Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities.... |
| CVE-2020-1804 | HIGH | 7.1 | 0.6% | Apr 27, 2020 | Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities.... |
| CVE-2020-12266 | HIGH | 7.5 | 1.7% | Apr 27, 2020 | An issue was discovered where there are multiple externally accessible pages that do not require any sort of authenticat... |
| CVE-2020-12242 | HIGH | 7.8 | 1.1% | Apr 27, 2020 | Valve Source allows local users to gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in ... |
| CVE-2020-12138 | HIGH | 8.8 | 3.3% | Apr 27, 2020 | AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of se... |
| CVE-2020-12133 | CRITICAL | 9.8 | 9.9% | Apr 27, 2020 | The Apros Evolution, ConsciusMap, and Furukawa provisioning systems through 2.8.1 allow remote code execution because of... |
| CVE-2020-12120 | HIGH | 7.5 | 1.8% | Apr 27, 2020 | The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such a... |
| CVE-2020-11822 | MEDIUM | 6.1 | 0.8% | Apr 27, 2020 | In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure --> user access groups page. Thus... |
| CVE-2020-11821 | MEDIUM | 5.3 | 1.1% | Apr 27, 2020 | In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hash... |
| CVE-2020-11817 | CRITICAL | 9.8 | 2.0% | Apr 27, 2020 | In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the content-type value. As... |
| CVE-2020-11810 | LOW | 3.7 | 1.6% | Apr 27, 2020 | An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using... |
| CVE-2020-11415 | MEDIUM | 4.9 | 0.6% | Apr 27, 2020 | An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can r... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now