2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11445 | MEDIUM | 5.3 | 1.8% | Apr 1, 2020 | TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive informatio... |
| CVE-2020-5344 | CRITICAL | 9.8 | 3.7% | Mar 31, 2020 | Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer ove... |
| CVE-2020-10696 | HIGH | 8.8 | 2.6% | Mar 31, 2020 | A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into ... |
| CVE-2020-7009 | HIGH | 8.8 | 1.6% | Mar 31, 2020 | Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker... |
| CVE-2020-5292 | HIGH | 8.8 | 1.4% | Mar 31, 2020 | Leantime before versions 2.0.15 and 2.1-beta3 has a SQL Injection vulnerability. The impact is high. Malicious users/att... |
| CVE-2020-5291 | HIGH | 7.8 | 0.9% | Mar 31, 2020 | Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespace... |
| CVE-2020-1712 | HIGH | 7.8 | 0.5% | Mar 31, 2020 | A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are ... |
| CVE-2020-11441 | MEDIUM | 6.1 | 2.3% | Mar 31, 2020 | phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF s... |
| CVE-2020-6008 | CRITICAL | 9.8 | 3.8% | Mar 31, 2020 | LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution |
| CVE-2020-4242 | HIGH | 8.8 | 4.6% | Mar 31, 2020 | IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to ex... |
| CVE-2020-4241 | HIGH | 8.8 | 66.3% | Mar 31, 2020 | IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to ex... |
| CVE-2020-4240 | MEDIUM | 6.5 | 1.9% | Mar 31, 2020 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An ... |
| CVE-2020-4239 | MEDIUM | 5.3 | 1.7% | Mar 31, 2020 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain sensitive information when a ... |
| CVE-2020-4238 | HIGH | 8.8 | 0.5% | Mar 31, 2020 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an atta... |
| CVE-2020-4237 | HIGH | 8.8 | 0.5% | Mar 31, 2020 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an atta... |
| CVE-2020-4236 | MEDIUM | 6.5 | 1.4% | Mar 31, 2020 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a denial of service due to... |
| CVE-2020-4235 | MEDIUM | 5.4 | 0.7% | Mar 31, 2020 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows user... |
| CVE-2020-4214 | HIGH | 7.5 | 1.6% | Mar 31, 2020 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete a directory caused by ... |
| CVE-2020-4208 | CRITICAL | 9.8 | 1.8% | Mar 31, 2020 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key... |
| CVE-2020-4206 | HIGH | 8.8 | 4.6% | Mar 31, 2020 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the syste... |
| CVE-2020-11414 | HIGH | 7.5 | 1.0% | Mar 31, 2020 | An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUploa... |
| CVE-2020-10595 | CRITICAL | 9.8 | 4.8% | Mar 31, 2020 | pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental pr... |
| CVE-2020-11113 | HIGH | 8.8 | 6.3% | Mar 31, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-11112 | HIGH | 8.8 | 3.7% | Mar 31, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-11111 | HIGH | 8.8 | 3.6% | Mar 31, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now