2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1699 | HIGH | 7.5 | 2.1% | Apr 21, 2020 | A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph... |
| CVE-2020-11891 | MEDIUM | 5.3 | 0.8% | Apr 21, 2020 | An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow th... |
| CVE-2020-11890 | MEDIUM | 5.3 | 2.8% | Apr 21, 2020 | An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to ... |
| CVE-2020-11889 | MEDIUM | 5.3 | 0.8% | Apr 21, 2020 | An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow th... |
| CVE-2020-10787 | HIGH | 8.8 | 2.5% | Apr 21, 2020 | An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the... |
| CVE-2020-10786 | HIGH | 8.8 | 4.8% | Apr 21, 2020 | A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary co... |
| CVE-2020-8842 | — | — | — | Apr 21, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-1967 | HIGH | 7.5 | 53.3% | Apr 21, 2020 | Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due... |
| CVE-2020-11828 | HIGH | 7.5 | 1.2% | Apr 21, 2020 | In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger su... |
| CVE-2020-8099 | MEDIUM | 6.2 | 0.4% | Apr 21, 2020 | A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to su... |
| CVE-2020-11968 | HIGH | 7.5 | 2.6% | Apr 21, 2020 | In the web-panel in IQrouter through 3.3.1, remote attackers can read system logs because of Incorrect Access Control. N... |
| CVE-2020-11967 | CRITICAL | 9.8 | 3.2% | Apr 21, 2020 | In IQrouter through 3.3.1, remote attackers can control the device (restart network, reboot, upgrade, reset) because of ... |
| CVE-2020-11966 | CRITICAL | 9.8 | 3.0% | Apr 21, 2020 | In IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote attackers to change the root p... |
| CVE-2020-11965 | CRITICAL | 9.8 | 2.0% | Apr 21, 2020 | In IQrouter through 3.3.1, there is a root user without a password, which allows attackers to gain full remote access vi... |
| CVE-2020-11964 | HIGH | 7.5 | 2.2% | Apr 21, 2020 | In IQrouter through 3.3.1, the Lua function diag_set_password in the web-panel allows remote attackers to change the roo... |
| CVE-2020-11963 | CRITICAL | 9.8 | 3.1% | Apr 21, 2020 | IQrouter through 3.3.1, when unconfigured, has multiple remote code execution vulnerabilities in the web-panel because o... |
| CVE-2020-11958 | HIGH | 7.8 | 1.7% | Apr 21, 2020 | re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme. |
| CVE-2020-9279 | CRITICAL | 9.8 | 2.2% | Apr 20, 2020 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A hard-coded account allows management-interface login ... |
| CVE-2020-9278 | CRITICAL | 9.1 | 1.6% | Apr 20, 2020 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The device can be reset to its default configuration by... |
| CVE-2020-9277 | CRITICAL | 9.8 | 2.5% | Apr 20, 2020 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. Authentication can be bypassed when accessing cgi modul... |
| CVE-2020-9276 | HIGH | 8.8 | 2.6% | Apr 20, 2020 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The function do_cgi(), which processes cgi requests sup... |
| CVE-2020-9275 | CRITICAL | 9.8 | 1.7% | Apr 20, 2020 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A cfm UDP service listening on port 65002 allows remote... |
| CVE-2020-11944 | MEDIUM | 6.1 | 1.2% | Apr 20, 2020 | Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment vari... |
| CVE-2020-11010 | HIGH | 8.8 | 1.0% | Apr 20, 2020 | In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when fi... |
| CVE-2020-11946 | HIGH | 7.5 | 51.8% | Apr 20, 2020 | Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now