2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9366 | CRITICAL | 9.8 | 2.6% | Feb 24, 2020 | A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted outp... |
| CVE-2020-9365 | HIGH | 7.5 | 6.9% | Feb 24, 2020 | An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function i... |
| CVE-2020-9363 | HIGH | 7.8 | 0.9% | Feb 24, 2020 | The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects End... |
| CVE-2020-9362 | HIGH | 7.8 | 1.5% | Feb 24, 2020 | The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. Th... |
| CVE-2020-4222 | CRITICAL | 9.8 | 15.5% | Feb 24, 2020 | IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By us... |
| CVE-2020-4213 | CRITICAL | 9.8 | 15.5% | Feb 24, 2020 | IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By us... |
| CVE-2020-4212 | CRITICAL | 9.8 | 15.0% | Feb 24, 2020 | IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By us... |
| CVE-2020-4211 | CRITICAL | 9.8 | 71.1% | Feb 24, 2020 | IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By us... |
| CVE-2020-4210 | CRITICAL | 9.8 | 15.5% | Feb 24, 2020 | IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By us... |
| CVE-2020-8131 | HIGH | 7.5 | 5.0% | Feb 24, 2020 | Arbitrary filesystem write vulnerability in Yarn before 1.22.0 allows attackers to write to any path on the filesystem a... |
| CVE-2020-8130 | MEDIUM | 6.4 | 1.4% | Feb 24, 2020 | There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that be... |
| CVE-2020-5188 | MEDIUM | 6.5 | 1.8% | Feb 24, 2020 | DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions. |
| CVE-2020-5187 | HIGH | 8.8 | 2.4% | Feb 24, 2020 | DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2). |
| CVE-2020-5186 | MEDIUM | 5.4 | 0.9% | Feb 24, 2020 | DNN (formerly DotNetNuke) through 9.4.4 allows XSS (issue 1 of 2). |
| CVE-2020-9355 | CRITICAL | 9.8 | 2.2% | Feb 23, 2020 | danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled. |
| CVE-2020-9354 | HIGH | 7.5 | 1.2% | Feb 23, 2020 | An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functional... |
| CVE-2020-9353 | HIGH | 7.5 | 1.5% | Feb 23, 2020 | An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) loadFile provided by the console functional... |
| CVE-2020-9352 | CRITICAL | 9.8 | 1.9% | Feb 23, 2020 | An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL fea... |
| CVE-2020-9351 | MEDIUM | 5.3 | 1.1% | Feb 23, 2020 | An issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request to /tools/developerCons... |
| CVE-2020-9350 | MEDIUM | 5.4 | 0.5% | Feb 23, 2020 | Graph Builder in SAS Visual Analytics 8.5 allows XSS via a graph template that is accessed directly. |
| CVE-2020-9342 | MEDIUM | 5.5 | 1.6% | Feb 22, 2020 | The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a ... |
| CVE-2020-9341 | HIGH | 8.8 | 0.6% | Feb 22, 2020 | CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&... |
| CVE-2020-9340 | HIGH | 7.2 | 1.0% | Feb 22, 2020 | fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/op_kandidat.php id parameter. |
| CVE-2020-9339 | MEDIUM | 5.4 | 0.6% | Feb 22, 2020 | SOPlanning 1.45 allows XSS via the Name or Comment to status.php. |
| CVE-2020-9338 | MEDIUM | 5.4 | 0.5% | Feb 22, 2020 | SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now