2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6175 | MEDIUM | 5.9 | 0.6% | Mar 16, 2020 | Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation. |
| CVE-2020-9472 | MEDIUM | 6.5 | 2.1% | Mar 16, 2020 | Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package f... |
| CVE-2020-9471 | HIGH | 8.8 | 2.3% | Mar 16, 2020 | Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package... |
| CVE-2020-7608 | MEDIUM | 5.3 | 0.5% | Mar 16, 2020 | yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload. |
| CVE-2020-9321 | HIGH | 7.5 | 0.7% | Mar 16, 2020 | configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents f... |
| CVE-2020-7916 | MEDIUM | 6.5 | 1.1% | Mar 16, 2020 | be_teacher in class-lp-admin-ajax.php in the LearnPress plugin 3.2.6.5 and earlier for WordPress allows any registered u... |
| CVE-2020-6582 | HIGH | 7.5 | 3.9% | Mar 16, 2020 | Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a la... |
| CVE-2020-6581 | HIGH | 7.3 | 1.6% | Mar 16, 2020 | Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nasty_metachars interprets \n as the character \ and ... |
| CVE-2020-5849 | HIGH | 7.5 | 93.2% | Mar 16, 2020 | Unraid 6.8.0 allows authentication bypass. |
| CVE-2020-5847 | CRITICAL | 9.8 | 95.8% | Mar 16, 2020 | Unraid through 6.8.0 allows Remote Code Execution. |
| CVE-2020-5844 | HIGH | 7.2 | 30.3% | Mar 16, 2020 | index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators t... |
| CVE-2020-3948 | HIGH | 7.8 | 0.3% | Mar 16, 2020 | Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privi... |
| CVE-2020-3947 | HIGH | 8.8 | 0.6% | Mar 16, 2020 | VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp. ... |
| CVE-2020-6990 | CRITICAL | 9.8 | 4.2% | Mar 16, 2020 | Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Cont... |
| CVE-2020-6988 | HIGH | 7.5 | 3.9% | Mar 16, 2020 | Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Cont... |
| CVE-2020-6984 | HIGH | 7.5 | 2.8% | Mar 16, 2020 | Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Cont... |
| CVE-2020-6980 | LOW | 3.3 | 0.4% | Mar 16, 2020 | Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Cont... |
| CVE-2020-6586 | MEDIUM | 5.4 | 27.3% | Mar 16, 2020 | Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /adm... |
| CVE-2020-6585 | HIGH | 8.8 | 1.2% | Mar 16, 2020 | Nagios Log Server 2.1.3 has CSRF. |
| CVE-2020-6584 | MEDIUM | 6.5 | 3.9% | Mar 16, 2020 | Nagios Log Server 2.1.3 has Incorrect Access Control. |
| CVE-2020-1740 | MEDIUM | 4.7 | 0.4% | Mar 16, 2020 | A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-v... |
| CVE-2020-1738 | LOW | 3.9 | 0.4% | Mar 16, 2020 | A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. ... |
| CVE-2020-1736 | LOW | 3.3 | 0.4% | Mar 16, 2020 | A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified... |
| CVE-2020-1735 | MEDIUM | 4.6 | 0.5% | Mar 16, 2020 | A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a n... |
| CVE-2020-10243 | CRITICAL | 9.8 | 2.0% | Mar 16, 2020 | An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a S... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now