2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6864 | MEDIUM | 6.5 | 0.5% | Feb 27, 2020 | ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to t... |
| CVE-2020-6863 | MEDIUM | 6.5 | 0.6% | Feb 27, 2020 | ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulner... |
| CVE-2020-3924 | CRITICAL | 9.8 | 1.3% | Feb 27, 2020 | DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers c... |
| CVE-2020-3923 | CRITICAL | 9.8 | 1.7% | Feb 27, 2020 | DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism... |
| CVE-2020-3175 | HIGH | 8.6 | 1.6% | Feb 26, 2020 | A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches co... |
| CVE-2020-3174 | MEDIUM | 4.7 | 0.3% | Feb 26, 2020 | A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker... |
| CVE-2020-3173 | HIGH | 7.8 | 0.4% | Feb 26, 2020 | A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, loc... |
| CVE-2020-3172 | HIGH | 8.8 | 2.0% | Feb 26, 2020 | A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an u... |
| CVE-2020-3171 | HIGH | 7.8 | 0.5% | Feb 26, 2020 | A vulnerability in the local management (local-mgmt) CLI of Cisco FXOS Software and Cisco UCS Manager Software could all... |
| CVE-2020-3170 | MEDIUM | 5.3 | 1.4% | Feb 26, 2020 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a... |
| CVE-2020-3169 | MEDIUM | 6.7 | 0.4% | Feb 26, 2020 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary comm... |
| CVE-2020-3168 | HIGH | 7.5 | 1.6% | Feb 26, 2020 | A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow a... |
| CVE-2020-3167 | HIGH | 7.8 | 0.5% | Feb 26, 2020 | A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local att... |
| CVE-2020-3166 | MEDIUM | 6.7 | 0.3% | Feb 26, 2020 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrar... |
| CVE-2020-3165 | HIGH | 8.2 | 1.3% | Feb 26, 2020 | A vulnerability in the implementation of Border Gateway Protocol (BGP) Message Digest 5 (MD5) authentication in Cisco NX... |
| CVE-2020-9274 | HIGH | 7.5 | 5.8% | Feb 26, 2020 | An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases ... |
| CVE-2020-8952 | MEDIUM | 6.1 | 0.7% | Feb 26, 2020 | Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter. |
| CVE-2020-8951 | MEDIUM | 5.4 | 0.6% | Feb 26, 2020 | Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the C... |
| CVE-2020-9337 | MEDIUM | 6.5 | 0.5% | Feb 26, 2020 | In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request. |
| CVE-2020-9407 | MEDIUM | 5.3 | 0.5% | Feb 26, 2020 | IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COO... |
| CVE-2020-9406 | CRITICAL | 9.8 | 1.2% | Feb 26, 2020 | IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service. |
| CVE-2020-9405 | MEDIUM | 6.1 | 0.6% | Feb 26, 2020 | IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page. |
| CVE-2020-9398 | CRITICAL | 9.8 | 1.3% | Feb 25, 2020 | ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQ... |
| CVE-2020-9394 | HIGH | 8.8 | 0.7% | Feb 25, 2020 | An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF. |
| CVE-2020-9393 | MEDIUM | 6.1 | 0.9% | Feb 25, 2020 | An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now