2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27717 | HIGH | 7.5 | 1.1% | Dec 24, 2020 | On BIG-IP DNS 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2, undisclosed series ... |
| CVE-2020-27716 | HIGH | 7.5 | 1.3% | Dec 24, 2020 | On versions 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when a BIG-IP APM vir... |
| CVE-2020-27715 | HIGH | 7.5 | 1.1% | Dec 24, 2020 | On BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3, crafted TLS request to the BIG-IP management interface via port 443 can cau... |
| CVE-2020-27714 | HIGH | 7.5 | 1.0% | Dec 24, 2020 | On the BIG-IP AFM version 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when a Protocol Inspection Profile is att... |
| CVE-2020-29189 | HIGH | 8.1 | 1.2% | Dec 24, 2020 | Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read... |
| CVE-2020-28186 | HIGH | 7.3 | 4.1% | Dec 24, 2020 | Email Injection in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to abuse the forget password functi... |
| CVE-2020-28169 | HIGH | 7 | 1.2% | Dec 24, 2020 | The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory ... |
| CVE-2020-27721 | HIGH | 7.5 | 1.0% | Dec 24, 2020 | In versions 16.0.0-16.0.0.1, 15.1.0-15.1.1, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, in a B... |
| CVE-2020-27718 | HIGH | 7.5 | 1.0% | Dec 24, 2020 | When a BIG-IP ASM or Advanced WAF system running version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.... |
| CVE-2020-5681 | HIGH | 7.8 | 0.9% | Dec 24, 2020 | Untrusted search path vulnerability in self-extracting files created by EpsonNet SetupManager versions 2.2.14 and earlie... |
| CVE-2020-2504 | HIGH | 7.5 | 1.0% | Dec 24, 2020 | If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP h... |
| CVE-2020-2499 | HIGH | 7.2 | 1.4% | Dec 24, 2020 | A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerabilit... |
| CVE-2020-35668 | HIGH | 7.5 | 1.6% | Dec 23, 2020 | RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquo... |
| CVE-2020-35666 | HIGH | 8.8 | 1.1% | Dec 23, 2020 | Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/pac... |
| CVE-2020-35598 | HIGH | 7.5 | 21.0% | Dec 23, 2020 | ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=.... |
| CVE-2020-35370 | HIGH | 8.8 | 7.5% | Dec 23, 2020 | A RCE vulnerability exists in Raysync below 3.3.3.8. An unauthenticated unauthorized attacker sending a specifically cra... |
| CVE-2020-35269 | HIGH | 8.8 | 2.3% | Dec 23, 2020 | Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery (CSRF) in many functions, li... |
| CVE-2020-27397 | HIGH | 8.8 | 2.6% | Dec 23, 2020 | Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing... |
| CVE-2020-11719 | HIGH | 7.5 | 1.0% | Dec 23, 2020 | An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. It relies on broken encr... |
| CVE-2020-35587 | HIGH | 7.5 | 1.5% | Dec 23, 2020 | In Solstice Pod before 3.0.3, the firmware can easily be decompiled/disassembled. The decompiled/disassembled files cont... |
| CVE-2020-29550 | HIGH | 7.5 | 1.4% | Dec 23, 2020 | An issue was discovered in URVE Build 24.03.2020. The password of an integration user account (used for the connection o... |
| CVE-2020-11718 | HIGH | 7.4 | 0.8% | Dec 23, 2020 | An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and below. Its software-update packages are ... |
| CVE-2020-35586 | HIGH | 7.5 | 1.4% | Dec 23, 2020 | In Solstice Pod before 3.3.0 (or Open4.3), the Administrator password can be enumerated using brute-force attacks via th... |
| CVE-2020-35585 | HIGH | 7.5 | 1.4% | Dec 23, 2020 | In Solstice Pod before 3.3.0 (or Open4.3), the screen key can be enumerated using brute-force attacks via the /lookin/in... |
| CVE-2020-35136 | HIGH | 7.2 | 6.4% | Dec 23, 2020 | Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now