2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11594 | HIGH | 7.5 | 1.2% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request t... |
| CVE-2020-11593 | HIGH | 7.5 | 1.0% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST req... |
| CVE-2020-11592 | HIGH | 7.5 | 1.2% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request a... |
| CVE-2020-11591 | MEDIUM | 5.3 | 1.0% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request a... |
| CVE-2020-11590 | MEDIUM | 5.3 | 1.0% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET requ... |
| CVE-2020-11589 | HIGH | 7.5 | 1.1% | Apr 6, 2020 | An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated a... |
| CVE-2020-11588 | MEDIUM | 5.3 | 1.0% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET requ... |
| CVE-2020-11585 | MEDIUM | 4.3 | 0.7% | Apr 6, 2020 | There is an information disclosure issue in DNN (formerly DotNetNuke) 9.5 within the built-in Activity-Feed/Messaging/Us... |
| CVE-2020-11582 | HIGH | 8.8 | 0.8% | Apr 6, 2020 | An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed ... |
| CVE-2020-11581 | HIGH | 8.1 | 9.8% | Apr 6, 2020 | An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed ... |
| CVE-2020-11580 | CRITICAL | 9.1 | 1.1% | Apr 6, 2020 | An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed ... |
| CVE-2020-5832 | HIGH | 7.8 | 0.4% | Apr 6, 2020 | Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalat... |
| CVE-2020-5300 | MEDIUM | 5.3 | 1.0% | Apr 6, 2020 | In Hydra (an OAuth2 Server and OpenID Certified™ OpenID Connect Provider written in Go), before version 1.4.0+oryOS.17, ... |
| CVE-2020-11545 | CRITICAL | 9.8 | 1.6% | Apr 6, 2020 | Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email... |
| CVE-2020-11544 | HIGH | 7.2 | 1.1% | Apr 6, 2020 | An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the ... |
| CVE-2020-11507 | HIGH | 7.8 | 0.8% | Apr 6, 2020 | An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM... |
| CVE-2020-11102 | MEDIUM | 5.6 | 1.9% | Apr 6, 2020 | hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not val... |
| CVE-2020-9473 | MEDIUM | 6.6 | 1.0% | Apr 6, 2020 | The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 has a passwordless ftp ssh user. By using an exploit chain, a... |
| CVE-2020-7622 | CRITICAL | 9.8 | 1.6% | Apr 6, 2020 | This affects the package io.jooby:jooby-netty before 1.6.9, from 2.0.0 and before 2.2.1. The DefaultHttpHeaders is set t... |
| CVE-2020-1728 | MEDIUM | 5.4 | 0.8% | Apr 6, 2020 | A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are ... |
| CVE-2020-8004 | HIGH | 7.5 | 3.0% | Apr 6, 2020 | STMicroelectronics STM32F1 devices have Incorrect Access Control. |
| CVE-2020-7639 | MEDIUM | 5.3 | 1.1% | Apr 6, 2020 | eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or ... |
| CVE-2020-7638 | MEDIUM | 5.3 | 1.0% | Apr 6, 2020 | confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding ... |
| CVE-2020-7637 | MEDIUM | 5.3 | 1.2% | Apr 6, 2020 | class-transformer before 0.3.1 allow attackers to perform Prototype Pollution. The classToPlainFromExist function could ... |
| CVE-2020-7636 | CRITICAL | 9.8 | 4.4% | Apr 6, 2020 | adb-driver through 0.1.8 is vulnerable to Command Injection.It allows execution of arbitrary commands via the command fu... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now