2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9211 | HIGH | 7.2 | 0.2% | Dec 27, 2024 | There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficien... |
| CVE-2020-9080 | HIGH | 7.8 | 0.1% | Dec 27, 2024 | There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker c... |
| CVE-2020-13712 | HIGH | 7.8 | 0.6% | Dec 20, 2024 | A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2... |
| CVE-2020-15934 | HIGH | 7.8 | 0.2% | Dec 19, 2024 | An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and bel... |
| CVE-2020-12820 | HIGH | 8.8 | 0.9% | Dec 19, 2024 | Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and b... |
| CVE-2020-12819 | HIGH | 7.5 | 0.8% | Dec 19, 2024 | A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6... |
| CVE-2020-12487 | HIGH | 7 | 0.3% | Dec 17, 2024 | Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make ... |
| CVE-2020-28398 | HIGH | 8.8 | 0.2% | Dec 10, 2024 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versio... |
| CVE-2020-3548 | HIGH | 7.5 | 0.8% | Nov 18, 2024 | A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for Cisco&n... |
| CVE-2020-3538 | HIGH | 8.1 | 0.5% | Nov 18, 2024 | A vulnerability in a certain REST API endpoint of Cisco Data Center Network Manager (DCNM) Software could allow an ... |
| CVE-2020-27124 | HIGH | 8.6 | 0.9% | Nov 18, 2024 | A vulnerability in the SSL/TLS handler of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthent... |
| CVE-2020-26074 | HIGH | 7.8 | 0.2% | Nov 18, 2024 | A vulnerability in system file transfer functions of Cisco SD-WAN vManage Software could allow an authenticated, lo... |
| CVE-2020-26073 | HIGH | 7.5 | 12.1% | Nov 18, 2024 | A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, ... |
| CVE-2020-26071 | HIGH | 8.4 | 0.2% | Nov 18, 2024 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overw... |
| CVE-2020-25720 | HIGH | 7.5 | 0.5% | Nov 17, 2024 | A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory... |
| CVE-2020-10370 | HIGH | 8.8 | 0.5% | Nov 11, 2024 | Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not... |
| CVE-2020-11926 | HIGH | 7.5 | 0.6% | Nov 7, 2024 | An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the d... |
| CVE-2020-11921 | HIGH | 8.8 | 0.2% | Nov 7, 2024 | An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to... |
| CVE-2020-11919 | HIGH | 8 | 0.3% | Nov 7, 2024 | An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection. |
| CVE-2020-26311 | HIGH | 7.5 | 0.5% | Oct 26, 2024 | Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular express... |
| CVE-2020-26310 | HIGH | 8.7 | 0.4% | Oct 26, 2024 | Validate.js provides a declarative way of validating javascript objects. All versions as of 30 November 2020 contain one... |
| CVE-2020-26309 | HIGH | 8.7 | 0.4% | Oct 26, 2024 | Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more r... |
| CVE-2020-26308 | HIGH | 7.5 | 0.5% | Oct 26, 2024 | Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more r... |
| CVE-2020-26307 | HIGH | 8.7 | 0.4% | Oct 26, 2024 | HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or... |
| CVE-2020-26306 | HIGH | 8.7 | 0.4% | Oct 26, 2024 | Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Vers... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now