2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11458 | MEDIUM | 4.9 | 1.1% | Apr 2, 2020 | app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MIS... |
| CVE-2020-8015 | HIGH | 7.8 | 0.5% | Apr 2, 2020 | A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attacke... |
| CVE-2020-1927 | MEDIUM | 6.1 | 56.7% | Apr 2, 2020 | In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential m... |
| CVE-2020-8146 | HIGH | 7.8 | 0.5% | Apr 1, 2020 | In UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM from arbitrary file del... |
| CVE-2020-8145 | MEDIUM | 6.5 | 1.1% | Apr 1, 2020 | The UniFi Video Server (Windows) web interface configuration restore functionality at the “backup” and “wizard” endpoint... |
| CVE-2020-8144 | HIGH | 8.4 | 0.7% | Apr 1, 2020 | The UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 x64) web interface Firmware Update functionality, under cert... |
| CVE-2020-6096 | HIGH | 8.1 | 5.4% | Apr 1, 2020 | An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calli... |
| CVE-2020-6009 | CRITICAL | 9.8 | 1.8% | Apr 1, 2020 | LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection. |
| CVE-2020-1958 | MEDIUM | 6.5 | 4.6% | Apr 1, 2020 | When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials c... |
| CVE-2020-11470 | LOW | 3.3 | 0.3% | Apr 1, 2020 | Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local pro... |
| CVE-2020-11469 | HIGH | 7.8 | 0.4% | Apr 1, 2020 | Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during install... |
| CVE-2020-8966 | MEDIUM | 6.1 | 0.8% | Apr 1, 2020 | There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages ... |
| CVE-2020-1954 | MEDIUM | 5.3 | 6.1% | Apr 1, 2020 | Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If... |
| CVE-2020-11467 | HIGH | 7.2 | 4.0% | Apr 1, 2020 | An issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify the helpdesk interface... |
| CVE-2020-11466 | MEDIUM | 4.3 | 1.2% | Apr 1, 2020 | An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privi... |
| CVE-2020-11465 | HIGH | 8.8 | 1.9% | Apr 1, 2020 | An issue was discovered in Deskpro before 2019.8.0. The /api/apps/* endpoints failed to properly validate a user's privi... |
| CVE-2020-11464 | MEDIUM | 4.3 | 1.2% | Apr 1, 2020 | An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privil... |
| CVE-2020-11463 | HIGH | 7.5 | 1.8% | Apr 1, 2020 | An issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to properly validate a user'... |
| CVE-2020-10948 | CRITICAL | 9.8 | 6.7% | Apr 1, 2020 | Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution v... |
| CVE-2020-10598 | MEDIUM | 6.1 | 0.3% | Apr 1, 2020 | In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment es... |
| CVE-2020-5290 | MEDIUM | 6.5 | 0.8% | Apr 1, 2020 | In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the `#token=$ssid` has... |
| CVE-2020-1934 | MEDIUM | 5.3 | 52.0% | Apr 1, 2020 | In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP serve... |
| CVE-2020-3850 | CRITICAL | 9.8 | 3.2% | Apr 1, 2020 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A... |
| CVE-2020-3849 | CRITICAL | 9.8 | 2.2% | Apr 1, 2020 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A... |
| CVE-2020-3848 | CRITICAL | 9.8 | 2.2% | Apr 1, 2020 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now