2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-37281HIGH8.1Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remo...
CVE-2020-37280HIGH7.5cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map l...
CVE-2020-37279HIGH8.1easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that allows attackers to execute comma...
CVE-2020-37278HIGH7.5Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arb...
CVE-2020-15878HIGH8.8An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the inf...
CVE-2020-15876HIGH8.8An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the inf...
CVE-2020-15874HIGH8.8An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can execute arbitrary s...
CVE-2020-37267HIGH7.5Renovate versions >=19.180.0 and <23.25.1, when used with Azure DevOps, may expose the bot's authorization token in serv...
CVE-2020-9695HIGH7.8Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an ou...
CVE-2020-37255HIGH7.5WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attack...
CVE-2020-37254HIGH7.8Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppS...
CVE-2020-37253HIGH7.8Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme Service that allows local attac...
CVE-2020-37252HIGH7.8Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows loca...
CVE-2020-37251HIGH7.8RealTimes Desktop Service 18.1.4 contains an unquoted service path vulnerability in the rpdsvc.exe binary that allows lo...
CVE-2020-37250HIGH7.8TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service binary that allows lo...
CVE-2020-37247HIGH8.5Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local att...
CVE-2020-37245HIGH7.5Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field that allows attac...
CVE-2020-37244HIGH8.2Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbi...
CVE-2020-37243HIGH8.2Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenti...
CVE-2020-37242HIGH8.2Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute ...
CVE-2020-37232HIGH7.8Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService...
CVE-2020-37231HIGH8.5Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local a...
CVE-2020-37230HIGH8.5Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allow...
CVE-2020-37229HIGH8.5OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows loc...
CVE-2020-37227HIGH8.8HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass cl...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now