2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28845 | HIGH | 7.8 | 1.1% | Nov 20, 2020 | A CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated user to inject malicious p... |
| CVE-2020-20740 | HIGH | 7.8 | 1.0% | Nov 20, 2020 | PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version(). |
| CVE-2020-26236 | HIGH | 7.5 | 0.9% | Nov 20, 2020 | In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's acc... |
| CVE-2020-19667 | HIGH | 7.8 | 1.6% | Nov 20, 2020 | Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7. |
| CVE-2020-13671 | HIGH | 8.8 | 4.3% | Nov 20, 2020 | Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as... |
| CVE-2020-4937 | HIGH | 7.5 | 0.8% | Nov 20, 2020 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms ... |
| CVE-2020-4739 | HIGH | 7.8 | 0.4% | Nov 20, 2020 | IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.... |
| CVE-2020-5668 | HIGH | 7.5 | 4.7% | Nov 20, 2020 | Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and ea... |
| CVE-2020-7572 | HIGH | 8.8 | 1.8% | Nov 19, 2020 | A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation W... |
| CVE-2020-7569 | HIGH | 8.8 | 2.3% | Nov 19, 2020 | A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebRepo... |
| CVE-2020-7566 | HIGH | 7.3 | 0.3% | Nov 19, 2020 | A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could a... |
| CVE-2020-7565 | HIGH | 7.3 | 0.3% | Nov 19, 2020 | A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references, all versions) that could... |
| CVE-2020-7559 | HIGH | 7.5 | 1.9% | Nov 19, 2020 | A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator ... |
| CVE-2020-7558 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Re... |
| CVE-2020-7557 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Rem... |
| CVE-2020-7556 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Re... |
| CVE-2020-7555 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Re... |
| CVE-2020-7554 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definitio... |
| CVE-2020-7553 | HIGH | 7.8 | 2.3% | Nov 19, 2020 | A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Re... |
| CVE-2020-7552 | HIGH | 7.8 | 1.6% | Nov 19, 2020 | A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause ... |
| CVE-2020-7551 | HIGH | 7.8 | 1.6% | Nov 19, 2020 | A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause ... |
| CVE-2020-7550 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definitio... |
| CVE-2020-7544 | HIGH | 7.8 | 0.3% | Nov 19, 2020 | A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD)... |
| CVE-2020-7538 | HIGH | 7.5 | 1.3% | Nov 19, 2020 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Co... |
| CVE-2020-28213 | HIGH | 8.8 | 1.1% | Nov 19, 2020 | A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now