2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3110 | HIGH | 8.8 | 5.7% | Feb 5, 2020 | A vulnerability in the Cisco Discovery Protocol implementation for the Cisco Video Surveillance 8000 Series IP Cameras c... |
| CVE-2020-6833 | HIGH | 7.5 | 1.2% | Feb 5, 2020 | An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure... |
| CVE-2020-6754 | CRITICAL | 9.8 | 94.8% | Feb 5, 2020 | dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to ... |
| CVE-2020-8507 | HIGH | 7.5 | 1.4% | Feb 5, 2020 | The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics. |
| CVE-2020-8506 | MEDIUM | 5.3 | 1.1% | Feb 5, 2020 | The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics. |
| CVE-2020-7978 | HIGH | 7.5 | 1.1% | Feb 5, 2020 | GitLab EE 12.6 and later through 12.7.2 allows Denial of Service. |
| CVE-2020-7977 | MEDIUM | 5.3 | 0.8% | Feb 5, 2020 | GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions. |
| CVE-2020-7976 | MEDIUM | 5.3 | 0.9% | Feb 5, 2020 | GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control. |
| CVE-2020-7974 | MEDIUM | 5.3 | 0.9% | Feb 5, 2020 | GitLab EE 10.1 through 12.7.2 allows Information Disclosure. |
| CVE-2020-7973 | MEDIUM | 6.1 | 0.9% | Feb 5, 2020 | GitLab through 12.7.2 allows XSS. |
| CVE-2020-7972 | HIGH | 7.5 | 0.9% | Feb 5, 2020 | GitLab EE 12.2 has Insecure Permissions (issue 2 of 2). |
| CVE-2020-7971 | MEDIUM | 6.1 | 0.7% | Feb 5, 2020 | GitLab EE 11.0 and later through 12.7.2 allows XSS. |
| CVE-2020-7969 | HIGH | 7.5 | 1.2% | Feb 5, 2020 | GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure. |
| CVE-2020-7968 | HIGH | 7.5 | 1.1% | Feb 5, 2020 | GitLab EE 8.0 through 12.7.2 has Incorrect Access Control. |
| CVE-2020-7967 | MEDIUM | 4.3 | 0.7% | Feb 5, 2020 | GitLab EE 8.0 through 12.7.2 has Insecure Permissions (issue 1 of 2). |
| CVE-2020-7966 | HIGH | 7.5 | 1.6% | Feb 5, 2020 | GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal. |
| CVE-2020-6969 | CRITICAL | 9.8 | 2.2% | Feb 5, 2020 | It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an ... |
| CVE-2020-6174 | CRITICAL | 9.8 | 1.0% | Feb 5, 2020 | TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature. |
| CVE-2020-8114 | CRITICAL | 9.8 | 1.4% | Feb 5, 2020 | GitLab EE 8.9 and later through 12.7.2 has Insecure Permission |
| CVE-2020-7979 | MEDIUM | 5.3 | 0.9% | Feb 5, 2020 | GitLab EE 8.9 and later through 12.7.2 has Insecure Permission |
| CVE-2020-7216 | HIGH | 7.5 | 1.1% | Feb 5, 2020 | An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial ... |
| CVE-2020-8632 | MEDIUM | 5.5 | 0.4% | Feb 5, 2020 | In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, ... |
| CVE-2020-8631 | MEDIUM | 5.5 | 0.4% | Feb 5, 2020 | cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict... |
| CVE-2020-5237 | HIGH | 8.8 | 3.9% | Feb 5, 2020 | Multiple relative path traversal vulnerabilities in the oneup/uploader-bundle before 1.9.3 and 2.1.5 allow remote attack... |
| CVE-2020-5208 | HIGH | 8.8 | 3.3% | Feb 5, 2020 | It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a re... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now