2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10194 | MEDIUM | 6.5 | 1.2% | Mar 20, 2020 | cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any ... |
| CVE-2020-8883 | MEDIUM | 4.3 | 8.4% | Mar 20, 2020 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio P... |
| CVE-2020-8882 | HIGH | 8.8 | 11.1% | Mar 20, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6... |
| CVE-2020-8881 | HIGH | 8.8 | 11.1% | Mar 20, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6... |
| CVE-2020-8880 | HIGH | 8.8 | 11.1% | Mar 20, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6... |
| CVE-2020-8879 | MEDIUM | 4.3 | 8.2% | Mar 20, 2020 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio P... |
| CVE-2020-8878 | HIGH | 8.8 | 11.1% | Mar 20, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6... |
| CVE-2020-8877 | MEDIUM | 4.3 | 8.2% | Mar 20, 2020 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio P... |
| CVE-2020-8137 | CRITICAL | 9.8 | 4.2% | Mar 20, 2020 | Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be contr... |
| CVE-2020-8136 | HIGH | 7.5 | 1.5% | Mar 20, 2020 | Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing ... |
| CVE-2020-8135 | CRITICAL | 9.8 | 1.3% | Mar 20, 2020 | The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attack... |
| CVE-2020-8134 | HIGH | 8.1 | 1.2% | Mar 20, 2020 | Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external netw... |
| CVE-2020-7961 | CRITICAL | 9.8 | 99.8% | Mar 20, 2020 | Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c... |
| CVE-2020-10558 | MEDIUM | 6.5 | 2.6% | Mar 20, 2020 | The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to... |
| CVE-2020-9425 | HIGH | 7.5 | 16.7% | Mar 20, 2020 | An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved... |
| CVE-2020-10792 | HIGH | 7.5 | 1.9% | Mar 20, 2020 | openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placin... |
| CVE-2020-1879 | LOW | 3.9 | 0.1% | Mar 20, 2020 | There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has ... |
| CVE-2020-1878 | MEDIUM | 5.5 | 0.2% | Mar 20, 2020 | Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C0... |
| CVE-2020-1864 | HIGH | 8.1 | 0.8% | Mar 20, 2020 | Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain som... |
| CVE-2020-1862 | LOW | 3.3 | 0.2% | Mar 20, 2020 | There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some opera... |
| CVE-2020-1796 | MEDIUM | 6.6 | 0.2% | Mar 20, 2020 | There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorizat... |
| CVE-2020-1795 | LOW | 2.4 | 0.2% | Mar 20, 2020 | There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation w... |
| CVE-2020-1794 | MEDIUM | 4.6 | 0.2% | Mar 20, 2020 | There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient auth... |
| CVE-2020-1793 | MEDIUM | 4.6 | 0.2% | Mar 20, 2020 | There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient auth... |
| CVE-2020-1709 | HIGH | 7.8 | 0.3% | Mar 20, 2020 | A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulne... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now