2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8990 | CRITICAL | 9.1 | 1.0% | Feb 20, 2020 | Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation. |
| CVE-2020-9318 | HIGH | 7.2 | 0.9% | Feb 20, 2020 | Red Gate SQL Monitor 9.0.13 through 9.2.14 allows an administrative user to perform a SQL injection attack by configurin... |
| CVE-2020-6977 | MEDIUM | 6.8 | 0.4% | Feb 20, 2020 | A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specia... |
| CVE-2020-6968 | HIGH | 7.8 | 0.3% | Feb 20, 2020 | Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification ... |
| CVE-2020-3765 | CRITICAL | 9.8 | 5.8% | Feb 20, 2020 | Adobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could... |
| CVE-2020-3764 | HIGH | 7.8 | 4.9% | Feb 20, 2020 | Adobe Media Encoder versions 14.0 and earlier have an out-of-bounds write vulnerability. Successful exploitation could l... |
| CVE-2020-9283 | HIGH | 7.5 | 20.9% | Feb 20, 2020 | golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the... |
| CVE-2020-9273 | HIGH | 8.8 | 12.0% | Feb 20, 2020 | In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a u... |
| CVE-2020-9272 | HIGH | 7.5 | 2.1% | Feb 20, 2020 | ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function. |
| CVE-2020-9308 | HIGH | 8.8 | 2.2% | Feb 20, 2020 | archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupte... |
| CVE-2020-7942 | MEDIUM | 6.5 | 0.8% | Feb 19, 2020 | Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the syste... |
| CVE-2020-6970 | CRITICAL | 9.8 | 2.5% | Feb 19, 2020 | A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have bee... |
| CVE-2020-3945 | HIGH | 7.5 | 1.4% | Feb 19, 2020 | vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosu... |
| CVE-2020-3944 | HIGH | 8.6 | 1.5% | Feb 19, 2020 | vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store conf... |
| CVE-2020-3943 | CRITICAL | 9.8 | 2.3% | Feb 19, 2020 | vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is ... |
| CVE-2020-3163 | MEDIUM | 5.9 | 0.9% | Feb 19, 2020 | A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remot... |
| CVE-2020-3160 | MEDIUM | 5.3 | 1.2% | Feb 19, 2020 | A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could ... |
| CVE-2020-3159 | MEDIUM | 6.1 | 0.8% | Feb 19, 2020 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker t... |
| CVE-2020-3158 | CRITICAL | 9.1 | 2.5% | Feb 19, 2020 | A vulnerability in the High Availability (HA) service of Cisco Smart Software Manager On-Prem could allow an unauthentic... |
| CVE-2020-3156 | MEDIUM | 6.1 | 1.0% | Feb 19, 2020 | A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacke... |
| CVE-2020-3154 | MEDIUM | 4.9 | 0.9% | Feb 19, 2020 | A vulnerability in the web UI of Cisco Cloud Web Security (CWS) could allow an authenticated, remote attacker to execute... |
| CVE-2020-3153 | MEDIUM | 6.5 | 27.5% | Feb 19, 2020 | A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authent... |
| CVE-2020-3138 | MEDIUM | 6.7 | 0.2% | Feb 19, 2020 | A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenti... |
| CVE-2020-3132 | MEDIUM | 5.9 | 1.5% | Feb 19, 2020 | A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA)... |
| CVE-2020-3114 | HIGH | 8.8 | 0.6% | Feb 19, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now