2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-10882HIGH8.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arch...
CVE-2020-10881CRITICAL9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firm...
CVE-2020-9552HIGH7.8Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbitr...
CVE-2020-9551HIGH7.8Adobe Bridge versions 10.0 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary co...
CVE-2020-3808MEDIUM5.9Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use (toctou) race condition ...
CVE-2020-3794CRITICAL9.8ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation co...
CVE-2020-3769HIGH7.5Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful ex...
CVE-2020-3761HIGH7.5ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation ...
CVE-2020-5282CRITICAL9.8In Nick Chan Bot before version 1.0.0-beta there is a vulnerability in the `npm` command which is part of this software ...
CVE-2020-5277MEDIUM5.4PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with `url_name` parameter. The problem is f...
CVE-2020-5281HIGH7.5In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from P...
CVE-2020-5280HIGH7.5http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. This vulnerability applies...
CVE-2020-3807CRITICAL9.8Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20...
CVE-2020-3806HIGH7.5Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20...
CVE-2020-3805CRITICAL9.8Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20...
CVE-2020-3804HIGH7.5Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20...
CVE-2020-3803HIGH7.8Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20...
CVE-2020-3802HIGH8.8Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20...
CVE-2020-3801CRITICAL9.8Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20...
CVE-2020-3800HIGH7.5Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20...
CVE-2020-3766HIGH7.8Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Succes...
CVE-2020-2171HIGH8.8Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attack...
CVE-2020-2170MEDIUM5.4Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote...
CVE-2020-2169MEDIUM6.1A form validation endpoint in Jenkins Queue cleanup Plugin 1.3 and earlier does not properly escape a query parameter di...
CVE-2020-2168HIGH8.8Jenkins Azure Container Service Plugin 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now