2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8105 | HIGH | 7.8 | 1.0% | Dec 20, 2021 | OS Command Injection vulnerability in the wirelessConnect handler of Abode iota All-In-One Security Kit allows an attack... |
| CVE-2020-8968 | HIGH | 7.1 | 0.3% | Dec 17, 2021 | Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text for... |
| CVE-2020-18081 | HIGH | 7.5 | 1.1% | Dec 17, 2021 | The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the pass... |
| CVE-2020-18078 | CRITICAL | 9.8 | 1.0% | Dec 17, 2021 | A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password. |
| CVE-2020-18077 | HIGH | 7.5 | 1.2% | Dec 17, 2021 | A buffer overflow vulnerability in the Virtual Path Mapping component of FTPShell v6.83 allows attackers to cause a deni... |
| CVE-2020-35216 | MEDIUM | 5.9 | 0.7% | Dec 16, 2021 | An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages. |
| CVE-2020-35215 | MEDIUM | 6.5 | 0.8% | Dec 16, 2021 | An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distribu... |
| CVE-2020-35214 | HIGH | 8.1 | 0.8% | Dec 16, 2021 | An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operati... |
| CVE-2020-35213 | HIGH | 8.1 | 1.2% | Dec 16, 2021 | An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a ma... |
| CVE-2020-35211 | HIGH | 7.5 | 1.0% | Dec 16, 2021 | An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation ... |
| CVE-2020-35210 | MEDIUM | 6.5 | 0.9% | Dec 16, 2021 | A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack ... |
| CVE-2020-35209 | HIGH | 7.5 | 0.9% | Dec 16, 2021 | An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration informat... |
| CVE-2020-18985 | MEDIUM | 6.1 | 0.7% | Dec 15, 2021 | An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any... |
| CVE-2020-18984 | MEDIUM | 6.1 | 0.8% | Dec 15, 2021 | A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Col... |
| CVE-2020-23545 | HIGH | 7.8 | 1.3% | Dec 15, 2021 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531. |
| CVE-2020-19042 | MEDIUM | 6.1 | 0.9% | Dec 13, 2021 | Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php. |
| CVE-2020-4496 | MEDIUM | 5.9 | 0.6% | Dec 13, 2021 | The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent... |
| CVE-2020-16156 | HIGH | 7.8 | 0.8% | Dec 13, 2021 | CPAN 2.28 allows Signature Verification Bypass. |
| CVE-2020-16155 | MEDIUM | 6.5 | 1.0% | Dec 13, 2021 | The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data. |
| CVE-2020-16154 | HIGH | 7.8 | 0.7% | Dec 13, 2021 | The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. |
| CVE-2020-12890 | MEDIUM | 6.7 | 0.3% | Dec 10, 2021 | Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with... |
| CVE-2020-19683 | MEDIUM | 5.4 | 0.6% | Dec 9, 2021 | A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php. |
| CVE-2020-19682 | HIGH | 8.8 | 0.5% | Dec 9, 2021 | A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php. |
| CVE-2020-27416 | CRITICAL | 9.8 | 1.6% | Dec 8, 2021 | Mahavitaran android application 7.50 and prior are affected by account takeover due to improper OTP validation, allows r... |
| CVE-2020-22421 | MEDIUM | 6.1 | 0.8% | Dec 8, 2021 | 74CMS v6.0.4 was discovered to contain a cross-site scripting (XSS) vulnerability via /index.php?m=&c=help&a=help_list&k... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now