2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1874 | MEDIUM | 5.5 | 0.2% | Feb 28, 2020 | NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid ... |
| CVE-2020-1873 | HIGH | 7.5 | 0.8% | Feb 28, 2020 | NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an ou... |
| CVE-2020-1861 | MEDIUM | 4.4 | 0.2% | Feb 28, 2020 | CloudEngine 12800 with versions of V200R001C00SPC600,V200R001C00SPC700,V200R002C01,V200R002C50SPC800,V200R002C50SPC800PW... |
| CVE-2020-1860 | HIGH | 7.5 | 0.7% | Feb 28, 2020 | NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an ac... |
| CVE-2020-1844 | HIGH | 7.8 | 0.2% | Feb 28, 2020 | PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in Huawei PCManager products. A... |
| CVE-2020-1792 | MEDIUM | 5.5 | 0.5% | Feb 28, 2020 | Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0... |
| CVE-2020-9463 | HIGH | 8.8 | 4.1% | Feb 28, 2020 | Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server... |
| CVE-2020-5247 | HIGH | 7.5 | 2.5% | Feb 28, 2020 | In Puma (RubyGem) before 4.3.2 and before 3.12.3, if an application using Puma allows untrusted input in a response head... |
| CVE-2020-9447 | MEDIUM | 6.1 | 0.7% | Feb 28, 2020 | There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can up... |
| CVE-2020-9442 | HIGH | 7.8 | 0.6% | Feb 28, 2020 | OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10,... |
| CVE-2020-9399 | MEDIUM | 5.5 | 1.1% | Feb 28, 2020 | The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 def... |
| CVE-2020-9434 | CRITICAL | 9.1 | 0.8% | Feb 27, 2020 | openssl_x509_check_ip_asc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean... |
| CVE-2020-9433 | CRITICAL | 9.1 | 0.8% | Feb 27, 2020 | openssl_x509_check_email in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean ... |
| CVE-2020-9432 | CRITICAL | 9.1 | 0.8% | Feb 27, 2020 | openssl_x509_check_host in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean f... |
| CVE-2020-9431 | HIGH | 7.5 | 2.7% | Feb 27, 2020 | In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addr... |
| CVE-2020-9430 | HIGH | 7.5 | 2.8% | Feb 27, 2020 | In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addres... |
| CVE-2020-9429 | HIGH | 7.5 | 1.5% | Feb 27, 2020 | In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard... |
| CVE-2020-9428 | HIGH | 7.5 | 3.1% | Feb 27, 2020 | In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in e... |
| CVE-2020-6418 | HIGH | 8.8 | 78.8% | Feb 27, 2020 | Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2020-6407 | HIGH | 8.8 | 1.7% | Feb 27, 2020 | Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially ... |
| CVE-2020-6386 | HIGH | 8.8 | 1.7% | Feb 27, 2020 | Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap c... |
| CVE-2020-6384 | HIGH | 8.8 | 1.6% | Feb 27, 2020 | Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap... |
| CVE-2020-6383 | HIGH | 8.8 | 6.4% | Feb 27, 2020 | Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2020-7063 | MEDIUM | 5.3 | 1.6% | Feb 27, 2020 | In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData:... |
| CVE-2020-7062 | HIGH | 7.5 | 3.5% | Feb 27, 2020 | In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if u... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now