2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3950 | HIGH | 7.8 | 7.3% | Mar 17, 2020 | VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for ... |
| CVE-2020-1720 | MEDIUM | 6.5 | 1.2% | Mar 17, 2020 | A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization chec... |
| CVE-2020-10596 | MEDIUM | 5.4 | 2.7% | Mar 17, 2020 | OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upl... |
| CVE-2020-10122 | MEDIUM | 6.5 | 0.9% | Mar 17, 2020 | cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547). |
| CVE-2020-10121 | CRITICAL | 9.8 | 1.8% | Mar 17, 2020 | cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs (SEC-546). |
| CVE-2020-10120 | HIGH | 7.2 | 2.7% | Mar 17, 2020 | cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545). |
| CVE-2020-10119 | CRITICAL | 9.8 | 2.2% | Mar 17, 2020 | cPanel before 84.0.20 allows a demo account to achieve remote code execution via a cpsrvd rsync shell (SEC-544). |
| CVE-2020-10118 | CRITICAL | 9.1 | 1.0% | Mar 17, 2020 | cPanel before 84.0.20 allows a demo account to modify files via Branding API calls (SEC-543). |
| CVE-2020-10117 | CRITICAL | 9.1 | 1.0% | Mar 17, 2020 | cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542). |
| CVE-2020-10116 | MEDIUM | 5.3 | 0.8% | Mar 17, 2020 | cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI ca... |
| CVE-2020-10115 | HIGH | 7.2 | 1.8% | Mar 17, 2020 | cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537). |
| CVE-2020-10114 | MEDIUM | 6.1 | 0.6% | Mar 17, 2020 | cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535). |
| CVE-2020-10113 | MEDIUM | 6.1 | 0.6% | Mar 17, 2020 | cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515). |
| CVE-2020-10380 | CRITICAL | 9.8 | 1.1% | Mar 17, 2020 | RMySQL through 0.10.19 allows SQL Injection. |
| CVE-2020-6646 | MEDIUM | 5.4 | 0.8% | Mar 17, 2020 | An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored... |
| CVE-2020-9347 | CRITICAL | 9.8 | 7.8% | Mar 16, 2020 | Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name tha... |
| CVE-2020-9346 | HIGH | 8.8 | 2.5% | Mar 16, 2020 | Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attack... |
| CVE-2020-8787 | HIGH | 7.5 | 0.9% | Mar 16, 2020 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow for an invalid Bean ID to be submit... |
| CVE-2020-8786 | CRITICAL | 9.8 | 1.1% | Mar 16, 2020 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 4 of 4). |
| CVE-2020-8785 | CRITICAL | 9.8 | 1.1% | Mar 16, 2020 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 3 of 4). |
| CVE-2020-8784 | CRITICAL | 9.8 | 1.1% | Mar 16, 2020 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 2 of 4). |
| CVE-2020-8783 | CRITICAL | 9.8 | 1.1% | Mar 16, 2020 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 1 of 4). |
| CVE-2020-7982 | HIGH | 8.1 | 1.6% | Mar 16, 2020 | An issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7. A bug in the fork of the... |
| CVE-2020-7919 | HIGH | 7.5 | 2.6% | Mar 16, 2020 | Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 f... |
| CVE-2020-7248 | HIGH | 7.5 | 2.5% | Mar 16, 2020 | libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now