2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3193 | MEDIUM | 5.3 | 1.1% | Mar 4, 2020 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthent... |
| CVE-2020-3192 | MEDIUM | 6.1 | 0.8% | Mar 4, 2020 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthent... |
| CVE-2020-3190 | MEDIUM | 5.8 | 1.3% | Mar 4, 2020 | A vulnerability in the IPsec packet processor of Cisco IOS XR Software could allow an unauthenticated remote attacker to... |
| CVE-2020-3185 | MEDIUM | 5.4 | 0.6% | Mar 4, 2020 | A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an authen... |
| CVE-2020-3182 | MEDIUM | 4.3 | 0.5% | Mar 4, 2020 | A vulnerability in the multicast DNS (mDNS) protocol configuration of Cisco Webex Meetings Client for MacOS could allow ... |
| CVE-2020-3181 | MEDIUM | 6.5 | 1.5% | Mar 4, 2020 | A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection (AMP) in Cisco AsyncOS Softw... |
| CVE-2020-3176 | MEDIUM | 6.7 | 0.4% | Mar 4, 2020 | A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on ... |
| CVE-2020-3164 | MEDIUM | 5.3 | 1.3% | Mar 4, 2020 | A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco W... |
| CVE-2020-3157 | MEDIUM | 5.4 | 0.6% | Mar 4, 2020 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat... |
| CVE-2020-3155 | HIGH | 7.4 | 0.9% | Mar 4, 2020 | A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, re... |
| CVE-2020-3148 | HIGH | 7.1 | 0.5% | Mar 4, 2020 | A vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) could allow an unauthenticated, remot... |
| CVE-2020-3128 | HIGH | 7.8 | 1.9% | Mar 4, 2020 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros... |
| CVE-2020-3127 | HIGH | 7.8 | 2.3% | Mar 4, 2020 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros... |
| CVE-2020-10057 | HIGH | 8.8 | 0.9% | Mar 4, 2020 | GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an ... |
| CVE-2020-9761 | CRITICAL | 9.8 | 2.1% | Mar 4, 2020 | An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configura... |
| CVE-2020-9757 | CRITICAL | 9.8 | 73.4% | Mar 4, 2020 | The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed ... |
| CVE-2020-7988 | HIGH | 8.8 | 0.7% | Mar 4, 2020 | An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any u... |
| CVE-2020-9364 | MEDIUM | 5.3 | 3.1% | Mar 4, 2020 | An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!... |
| CVE-2020-5251 | MEDIUM | 5.3 | 0.8% | Mar 4, 2020 | In parser-server before version 4.1.0, you can fetch all the users objects, by using regex in the NoSQL query. Using the... |
| CVE-2020-10029 | MEDIUM | 5.5 | 0.8% | Mar 4, 2020 | The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input ... |
| CVE-2020-5536 | HIGH | 8.8 | 0.6% | Mar 4, 2020 | OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to bypass authentica... |
| CVE-2020-5535 | HIGH | 8.8 | 0.9% | Mar 4, 2020 | OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary... |
| CVE-2020-1734 | HIGH | 7.4 | 0.4% | Mar 3, 2020 | A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses s... |
| CVE-2020-5403 | HIGH | 7.5 | 1.1% | Mar 3, 2020 | Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be ... |
| CVE-2020-5404 | MEDIUM | 5.9 | 0.7% | Mar 3, 2020 | The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorr... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now