2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10222 | HIGH | 8.1 | 2.4% | Mar 8, 2020 | npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted... |
| CVE-2020-10221 | HIGH | 8.8 | 36.8% | Mar 8, 2020 | lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands vi... |
| CVE-2020-10220 | CRITICAL | 9.8 | 99.7% | Mar 7, 2020 | An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php... |
| CVE-2020-9470 | HIGH | 7.8 | 0.6% | Mar 7, 2020 | An issue was discovered in Wing FTP Server 6.2.5 before February 2020. Due to insecure permissions when handling session... |
| CVE-2020-9281 | MEDIUM | 6.1 | 4.3% | Mar 7, 2020 | A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attacke... |
| CVE-2020-8439 | MEDIUM | 6.5 | 1.6% | Mar 7, 2020 | Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login pa... |
| CVE-2020-10216 | HIGH | 8.8 | 5.6% | Mar 7, 2020 | An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands ... |
| CVE-2020-10215 | HIGH | 8.8 | 5.9% | Mar 7, 2020 | An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands ... |
| CVE-2020-10214 | HIGH | 8.8 | 18.3% | Mar 7, 2020 | An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary... |
| CVE-2020-10213 | HIGH | 8.8 | 5.0% | Mar 7, 2020 | An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands ... |
| CVE-2020-8635 | HIGH | 7.8 | 0.8% | Mar 7, 2020 | Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configura... |
| CVE-2020-8634 | HIGH | 7.8 | 0.4% | Mar 7, 2020 | Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file ma... |
| CVE-2020-10212 | CRITICAL | 9.8 | 1.5% | Mar 7, 2020 | upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking... |
| CVE-2020-10020 | — | — | — | Mar 7, 2020 | Rejected reason: Number assigned to issue that does not qualify for a CVE |
| CVE-2020-5328 | CRITICAL | 9.8 | 1.4% | Mar 6, 2020 | Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough aut... |
| CVE-2020-5327 | CRITICAL | 9.8 | 3.6% | Mar 6, 2020 | Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerabi... |
| CVE-2020-10112 | MEDIUM | 5.4 | 1.4% | Mar 6, 2020 | Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By defaul... |
| CVE-2020-10111 | HIGH | 7.5 | 1.9% | Mar 6, 2020 | Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the repor... |
| CVE-2020-10110 | MEDIUM | 5.3 | 2.6% | Mar 6, 2020 | Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vul... |
| CVE-2020-7212 | HIGH | 7.5 | 3.3% | Mar 6, 2020 | The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denia... |
| CVE-2020-10193 | HIGH | 7.5 | 1.4% | Mar 6, 2020 | ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an arch... |
| CVE-2020-9458 | HIGH | 8.8 | 2.5% | Mar 6, 2020 | In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (wi... |
| CVE-2020-9457 | HIGH | 8.8 | 2.5% | Mar 6, 2020 | The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) t... |
| CVE-2020-9456 | HIGH | 8.8 | 2.5% | Mar 6, 2020 | In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (wi... |
| CVE-2020-9455 | MEDIUM | 4.3 | 1.4% | Mar 6, 2020 | The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) t... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now