2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25719 | HIGH | 7.2 | 1.7% | Feb 18, 2022 | A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authenticat... |
| CVE-2020-25718 | HIGH | 8.8 | 1.6% | Feb 18, 2022 | A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domai... |
| CVE-2020-25717 | HIGH | 8.1 | 1.6% | Feb 18, 2022 | A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cau... |
| CVE-2020-8107 | HIGH | 7.8 | 0.3% | Feb 18, 2022 | A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper... |
| CVE-2020-6922 | HIGH | 7.8 | 0.9% | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients h... |
| CVE-2020-6921 | HIGH | 7.8 | 0.9% | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients h... |
| CVE-2020-6920 | MEDIUM | 5.5 | 0.9% | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients h... |
| CVE-2020-6919 | HIGH | 7.8 | 0.9% | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients h... |
| CVE-2020-6918 | HIGH | 7.8 | 0.9% | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients h... |
| CVE-2020-6917 | HIGH | 7.8 | 0.9% | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients h... |
| CVE-2020-26728 | CRITICAL | 9.8 | 3.5% | Feb 11, 2022 | A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05.19(6318)_CN which allow... |
| CVE-2020-14523 | CRITICAL | 9.8 | 2.2% | Feb 11, 2022 | Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitra... |
| CVE-2020-14521 | CRITICAL | 9.8 | 1.2% | Feb 11, 2022 | Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerabil... |
| CVE-2020-36062 | CRITICAL | 9.8 | 2.3% | Feb 11, 2022 | Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows a... |
| CVE-2020-13677 | HIGH | 7.5 | 1.0% | Feb 11, 2022 | Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which ma... |
| CVE-2020-13676 | MEDIUM | 6.5 | 0.8% | Feb 11, 2022 | The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclo... |
| CVE-2020-13675 | CRITICAL | 9.8 | 1.2% | Feb 11, 2022 | Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all... |
| CVE-2020-13674 | MEDIUM | 6.5 | 0.4% | Feb 11, 2022 | The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under som... |
| CVE-2020-13673 | MEDIUM | 6.1 | 0.3% | Feb 11, 2022 | The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the f... |
| CVE-2020-13672 | MEDIUM | 6.1 | 0.7% | Feb 11, 2022 | Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting... |
| CVE-2020-13670 | HIGH | 7.5 | 1.1% | Feb 11, 2022 | Information Disclosure vulnerability in file module of Drupal Core allows an attacker to gain access to the file metadat... |
| CVE-2020-13669 | MEDIUM | 6.1 | 0.6% | Feb 11, 2022 | Cross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows attacker to inject XSS. This issue affects: D... |
| CVE-2020-13668 | MEDIUM | 6.1 | 0.7% | Feb 11, 2022 | Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected... |
| CVE-2020-7534 | HIGH | 8.8 | 0.4% | Feb 4, 2022 | A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sen... |
| CVE-2020-12966 | MEDIUM | 5.5 | 0.3% | Feb 4, 2022 | AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypt... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now