2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9423 | CRITICAL | 9.8 | 4.9% | Mar 18, 2020 | LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of ... |
| CVE-2020-10674 | CRITICAL | 9.8 | 1.3% | Mar 18, 2020 | PerlSpeak through 2.01 allows attackers to execute arbitrary OS commands, as demonstrated by use of system and 2-argumen... |
| CVE-2020-10673 | HIGH | 8.8 | 8.0% | Mar 18, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-10672 | HIGH | 8.8 | 3.1% | Mar 18, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-10365 | MEDIUM | 6.5 | 1.3% | Mar 18, 2020 | LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the datab... |
| CVE-2020-7258 | MEDIUM | 4.8 | 0.5% | Mar 18, 2020 | Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update all... |
| CVE-2020-7256 | MEDIUM | 4.8 | 0.5% | Mar 18, 2020 | Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update all... |
| CVE-2020-10665 | MEDIUM | 6.7 | 1.4% | Mar 18, 2020 | Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnost... |
| CVE-2020-9326 | HIGH | 7.5 | 1.0% | Mar 18, 2020 | BeyondTrust Privilege Management for Windows and Mac (aka PMWM; formerly Avecto Defendpoint) 5.1 through 5.5 before 5.5 ... |
| CVE-2020-9325 | HIGH | 7.5 | 1.8% | Mar 18, 2020 | Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download. |
| CVE-2020-9324 | HIGH | 7.5 | 1.4% | Mar 18, 2020 | Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC. |
| CVE-2020-9323 | MEDIUM | 5.3 | 1.6% | Mar 18, 2020 | Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx. |
| CVE-2020-6976 | MEDIUM | 5.5 | 0.8% | Mar 18, 2020 | Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be exploited wh... |
| CVE-2020-4199 | MEDIUM | 4.3 | 0.5% | Mar 18, 2020 | IBM Tivoli Netcool/OMNIbus 8.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute ma... |
| CVE-2020-9443 | MEDIUM | 6.1 | 0.6% | Mar 18, 2020 | Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be expl... |
| CVE-2020-7002 | HIGH | 7.8 | 1.1% | Mar 18, 2020 | Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows can be explo... |
| CVE-2020-3922 | CRITICAL | 9.8 | 1.5% | Mar 18, 2020 | LisoMail, by ArmorX, allows SQL Injections, attackers can access the database without authentication via a URL parameter... |
| CVE-2020-10659 | MEDIUM | 4.3 | 0.4% | Mar 18, 2020 | Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validati... |
| CVE-2020-8600 | CRITICAL | 9.8 | 4.2% | Mar 18, 2020 | Trend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal vulnerability that could ... |
| CVE-2020-8599 | CRITICAL | 9.8 | 11.6% | Mar 18, 2020 | Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to... |
| CVE-2020-8598 | CRITICAL | 9.8 | 13.2% | Mar 18, 2020 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerabl... |
| CVE-2020-8470 | HIGH | 7.5 | 4.5% | Mar 18, 2020 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerabl... |
| CVE-2020-8468 | HIGH | 8.8 | 5.8% | Mar 18, 2020 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a co... |
| CVE-2020-8467 | HIGH | 8.8 | 10.8% | Mar 18, 2020 | A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow r... |
| CVE-2020-3951 | LOW | 3.8 | 0.3% | Mar 17, 2020 | VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now