2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5252 | MEDIUM | 4.1 | 0.4% | Mar 23, 2020 | The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that a... |
| CVE-2020-1944 | CRITICAL | 9.8 | 2.7% | Mar 23, 2020 | There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling at... |
| CVE-2020-10879 | CRITICAL | 9.8 | 83.9% | Mar 23, 2020 | rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nod... |
| CVE-2020-10875 | HIGH | 7.5 | 1.7% | Mar 23, 2020 | Motorola FX9500 devices allow remote attackers to conduct absolute path traversal attacks, as demonstrated by PL/SQL Ser... |
| CVE-2020-8868 | CRITICAL | 9.8 | 9.5% | Mar 23, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve ... |
| CVE-2020-8866 | MEDIUM | 6.5 | 9.6% | Mar 23, 2020 | This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmai... |
| CVE-2020-8865 | MEDIUM | 6.3 | 6.8% | Mar 23, 2020 | This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webma... |
| CVE-2020-8864 | HIGH | 8.8 | 80.2% | Mar 23, 2020 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-86... |
| CVE-2020-8863 | HIGH | 8.8 | 76.7% | Mar 23, 2020 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-86... |
| CVE-2020-8859 | HIGH | 7.5 | 3.5% | Mar 23, 2020 | This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Ele... |
| CVE-2020-6967 | CRITICAL | 9.8 | 5.4% | Mar 23, 2020 | In Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platfor... |
| CVE-2020-10874 | HIGH | 7.5 | 1.4% | Mar 23, 2020 | Motorola FX9500 devices allow remote attackers to read database files. |
| CVE-2020-7482 | MEDIUM | 6.1 | 0.8% | Mar 23, 2020 | A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andov... |
| CVE-2020-7481 | MEDIUM | 6.1 | 0.8% | Mar 23, 2020 | A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andov... |
| CVE-2020-7480 | CRITICAL | 9.8 | 1.5% | Mar 23, 2020 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versi... |
| CVE-2020-7479 | HIGH | 7.8 | 0.5% | Mar 23, 2020 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the se... |
| CVE-2020-7478 | HIGH | 7.5 | 4.0% | Mar 23, 2020 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14 and prior using the se... |
| CVE-2020-7477 | HIGH | 7.5 | 1.3% | Mar 23, 2020 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module ... |
| CVE-2020-7476 | HIGH | 7.8 | 0.4% | Mar 23, 2020 | A CWE-426: Untrusted Search Path vulnerability exists in ZigBee Installation Kit (Versions prior to 1.0.1), which could ... |
| CVE-2020-5722 | CRITICAL | 9.8 | 83.9% | Mar 23, 2020 | The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafte... |
| CVE-2020-10871 | MEDIUM | 5.3 | 1.7% | Mar 23, 2020 | In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOT... |
| CVE-2020-10870 | MEDIUM | 5.5 | 0.3% | Mar 23, 2020 | Zim through 0.72.1 creates temporary directories with predictable names. A malicious user could predict and create Zim's... |
| CVE-2020-7475 | CRITICAL | 9.8 | 1.5% | Mar 23, 2020 | A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective... |
| CVE-2020-7474 | HIGH | 7.8 | 0.4% | Mar 23, 2020 | A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002 and prior), for the PME... |
| CVE-2020-8876 | MEDIUM | 5.5 | 0.5% | Mar 23, 2020 | This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.2-... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now