2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3113 | MEDIUM | 5.4 | 0.6% | Feb 19, 2020 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authent... |
| CVE-2020-3112 | HIGH | 8.8 | 1.5% | Feb 19, 2020 | A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remot... |
| CVE-2020-6062 | HIGH | 7.5 | 6.0% | Feb 19, 2020 | An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A speci... |
| CVE-2020-6061 | CRITICAL | 9.8 | 5.0% | Feb 19, 2020 | An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A... |
| CVE-2020-8959 | HIGH | 7.8 | 0.4% | Feb 19, 2020 | Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking. |
| CVE-2020-8824 | MEDIUM | 5.4 | 0.6% | Feb 19, 2020 | Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access Control > Add Managed De... |
| CVE-2020-8441 | CRITICAL | 9.8 | 4.8% | Feb 19, 2020 | JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function... |
| CVE-2020-4230 | MEDIUM | 6.7 | 0.4% | Feb 19, 2020 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of privil... |
| CVE-2020-4204 | HIGH | 7.8 | 0.6% | Feb 19, 2020 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buf... |
| CVE-2020-4200 | MEDIUM | 6.5 | 1.6% | Feb 19, 2020 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated atta... |
| CVE-2020-4161 | MEDIUM | 6.5 | 1.4% | Feb 19, 2020 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 could allow an authenticated attacker to cause a ... |
| CVE-2020-4135 | HIGH | 7.5 | 2.9% | Feb 19, 2020 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthe... |
| CVE-2020-8633 | MEDIUM | 5.3 | 1.0% | Feb 18, 2020 | An issue was discovered in Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7. When grantors revoked a shared calend... |
| CVE-2020-7796 | CRITICAL | 9.8 | 85.4% | Feb 18, 2020 | Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enab... |
| CVE-2020-9271 | MEDIUM | 6.5 | 0.4% | Feb 18, 2020 | ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php. |
| CVE-2020-9270 | HIGH | 8.8 | 0.5% | Feb 18, 2020 | ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php. |
| CVE-2020-9269 | HIGH | 7.2 | 2.4% | Feb 18, 2020 | SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as... |
| CVE-2020-9268 | HIGH | 7.5 | 1.4% | Feb 18, 2020 | SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_creat... |
| CVE-2020-9267 | MEDIUM | 6.5 | 0.5% | Feb 18, 2020 | SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajax_server.php. |
| CVE-2020-9266 | MEDIUM | 6.5 | 0.5% | Feb 18, 2020 | SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xaja... |
| CVE-2020-9265 | HIGH | 8.2 | 1.5% | Feb 18, 2020 | phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demon... |
| CVE-2020-7450 | CRITICAL | 9.8 | 2.4% | Feb 18, 2020 | In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-S... |
| CVE-2020-9264 | MEDIUM | 5.5 | 1.2% | Feb 18, 2020 | ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a Z... |
| CVE-2020-8998 | — | — | — | Feb 18, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-6845 | MEDIUM | 6.1 | 0.9% | Feb 18, 2020 | An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin account... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now