2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-36879HIGH8.5Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabl...
CVE-2020-36878HIGH8.7ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed throug...
CVE-2020-36876HIGH8.7ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0....
CVE-2020-36874HIGH8.7ACE SECURITY WIP-90113 HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/...
CVE-2020-36873HIGH8.7Astak CM-818T3 2.4GHz wireless security surveillance cameras contain an unauthenticated configuration disclosure vulnera...
CVE-2020-36872HIGH8.7BACnet Test Server versions up to and including 1.01 contains a remote denial of service vulnerability in its BACnet/IP ...
CVE-2020-36871HIGH8.7ESCAM QD-900 WIFI HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi351...
CVE-2020-36869HIGH7.2Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page. Exploitati...
CVE-2020-36868HIGH7.8Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The s...
CVE-2020-36867HIGH8.8Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF download/export functional...
CVE-2020-36863HIGH8.8Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that lo...
CVE-2020-36859HIGH8.8The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains multiple SQL injection...
CVE-2020-36857HIGH7.2Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface ...
CVE-2020-36856HIGH8.8Nagios XI versions prior to 5.6.14 contain an authenticated remote command execution vulnerability in the CCM command_te...
CVE-2020-36853HIGH7.2The 10WebMapBuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Plugin Settings Change in vers...
CVE-2020-9322HIGH8.8The /users endpoint in Statamic Core before 2.11.8 allows XSS to add an administrator user. This can be exploited via CS...
CVE-2020-36850HIGH8.7An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause pa...
CVE-2020-36848HIGH7.5The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sens...
CVE-2020-36791HIGH7.1In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash alloc...
CVE-2020-9295HIGH7.5FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and For...
CVE-2020-23438HIGH7.8Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.
CVE-2020-10095HIGH8.1Various Lexmark devices have CSRF that allows an attacker to modify the configuration of the device.
CVE-2020-8094HIGH7.8An untrusted search path vulnerability in testinitsigs.exe as used in Bitdefender Antivirus Free 2020 allows a low-privi...
CVE-2020-9236HIGH8.8There is an improper interface design vulnerability in Huawei product. A module interface of the impated product does no...
CVE-2020-9222HIGH7.8There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on speci...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now