2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8608 | MEDIUM | 5.6 | 2.5% | Feb 6, 2020 | In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in lat... |
| CVE-2020-7954 | HIGH | 7.8 | 0.4% | Feb 6, 2020 | An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is possible to perform priv... |
| CVE-2020-7953 | HIGH | 7.5 | 1.2% | Feb 6, 2020 | An issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is possible to read server files (e.g., /e... |
| CVE-2020-7920 | HIGH | 7.5 | 2.1% | Feb 6, 2020 | pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service. |
| CVE-2020-6856 | MEDIUM | 6.5 | 0.9% | Feb 6, 2020 | An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allow... |
| CVE-2020-6855 | MEDIUM | 6.5 | 0.9% | Feb 6, 2020 | A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers... |
| CVE-2020-6767 | MEDIUM | 6.5 | 1.3% | Feb 6, 2020 | A path traversal vulnerability in the Bosch Video Management System (BVMS) FileTransferService allows an authenticated r... |
| CVE-2020-5720 | MEDIUM | 5.9 | 1.1% | Feb 6, 2020 | MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wher... |
| CVE-2020-5856 | HIGH | 7.5 | 1.0% | Feb 6, 2020 | On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic using the default 'xnet' dr... |
| CVE-2020-5855 | MEDIUM | 4.3 | 0.3% | Feb 6, 2020 | When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorize... |
| CVE-2020-5854 | MEDIUM | 5.9 | 0.8% | Feb 6, 2020 | On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm ... |
| CVE-2020-5528 | MEDIUM | 6.1 | 0.8% | Feb 6, 2020 | Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier (Movable Type 7), Movable T... |
| CVE-2020-8658 | HIGH | 8.8 | 9.9% | Feb 6, 2020 | The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_... |
| CVE-2020-8649 | MEDIUM | 5.9 | 0.5% | Feb 6, 2020 | There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in driver... |
| CVE-2020-8648 | HIGH | 7.1 | 0.7% | Feb 6, 2020 | There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in dr... |
| CVE-2020-8647 | MEDIUM | 6.1 | 0.4% | Feb 6, 2020 | There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt... |
| CVE-2020-8644 | CRITICAL | 9.8 | 86.7% | Feb 5, 2020 | PlaySMS before 1.4.3 does not sanitize inputs from a malicious string. |
| CVE-2020-8641 | HIGH | 8.8 | 10.8% | Feb 5, 2020 | Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php pa... |
| CVE-2020-6854 | MEDIUM | 5.4 | 0.5% | Feb 5, 2020 | A cross-site scripting (XSS) vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attac... |
| CVE-2020-3149 | MEDIUM | 4.8 | 0.6% | Feb 5, 2020 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an au... |
| CVE-2020-3123 | HIGH | 7.5 | 2.6% | Feb 5, 2020 | A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.... |
| CVE-2020-3120 | MEDIUM | 6.5 | 2.0% | Feb 5, 2020 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco... |
| CVE-2020-3119 | HIGH | 8.8 | 5.1% | Feb 5, 2020 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, ... |
| CVE-2020-3118 | HIGH | 8.8 | 11.8% | Feb 5, 2020 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated,... |
| CVE-2020-3111 | HIGH | 8.8 | 3.1% | Feb 5, 2020 | A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, ad... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now