2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-3249HIGH7.5Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r...
CVE-2020-3248CRITICAL9.8Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r...
CVE-2020-3247CRITICAL9.8Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r...
CVE-2020-3243CRITICAL9.8Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r...
CVE-2020-3240HIGH7.3Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r...
CVE-2020-3239HIGH8.8Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r...
CVE-2020-3194HIGH7.8A vulnerability in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windo...
CVE-2020-3177HIGH7.5A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and ...
CVE-2020-3162HIGH7.5A vulnerability in the Constrained Application Protocol (CoAP) implementation of Cisco IoT Field Network Director could ...
CVE-2020-1632HIGH8.6In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evol...
CVE-2020-11660MEDIUM6.5CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricte...
CVE-2020-11659MEDIUM4.3CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a rest...
CVE-2020-11658CRITICAL9.8CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to by...
CVE-2020-3161CRITICAL9.8A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code wi...
CVE-2020-11666HIGH8.8CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privile...
CVE-2020-11665MEDIUM6.1CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attac...
CVE-2020-11664MEDIUM6.1CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attack...
CVE-2020-11663MEDIUM6.1CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform ...
CVE-2020-11662HIGH7.5CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-...
CVE-2020-11661HIGH8.1CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit ...
CVE-2020-10951MEDIUM4.7Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages.
CVE-2020-6996CRITICAL9.8Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source ...
CVE-2020-11799CRITICAL9.8Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. This ca...
CVE-2020-10615HIGH7.5Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers caus...
CVE-2020-10613HIGH7.5Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to d...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now