2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6019 | HIGH | 7.5 | 2.8% | Nov 13, 2020 | Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConn... |
| CVE-2020-26222 | HIGH | 8.8 | 2.9% | Nov 13, 2020 | Dependabot is a set of packages for automated dependency management for Ruby, JavaScript, Python, PHP, Elixir, Rust, Jav... |
| CVE-2020-25557 | HIGH | 8.8 | 9.9% | Nov 13, 2020 | In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing his/her username & password. A... |
| CVE-2020-25538 | HIGH | 8.8 | 9.9% | Nov 13, 2020 | An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and r... |
| CVE-2020-25165 | HIGH | 7.5 | 1.7% | Nov 13, 2020 | BD Alaris PC Unit, Model 8015, Versions 9.33.1 and earlier and BD Alaris Systems Manager, Versions 4.33 and earlier The ... |
| CVE-2020-25155 | HIGH | 7.5 | 0.7% | Nov 13, 2020 | The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information... |
| CVE-2020-25151 | HIGH | 7.5 | 1.1% | Nov 13, 2020 | The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack... |
| CVE-2020-21667 | HIGH | 7.2 | 1.0% | Nov 13, 2020 | In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malic... |
| CVE-2020-6156 | HIGH | 7.8 | 1.3% | Nov 13, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f... |
| CVE-2020-6155 | HIGH | 7.8 | 2.6% | Nov 13, 2020 | A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD ... |
| CVE-2020-6150 | HIGH | 7.8 | 1.3% | Nov 13, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompressi... |
| CVE-2020-6149 | HIGH | 7.8 | 1.3% | Nov 13, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f... |
| CVE-2020-6148 | HIGH | 7.8 | 1.3% | Nov 13, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f... |
| CVE-2020-6147 | HIGH | 7.8 | 1.4% | Nov 13, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f... |
| CVE-2020-1847 | HIGH | 7.5 | 0.7% | Nov 13, 2020 | There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario o... |
| CVE-2020-15783 | HIGH | 7.5 | 1.6% | Nov 12, 2020 | A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All ver... |
| CVE-2020-12927 | HIGH | 7.8 | 0.3% | Nov 12, 2020 | A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated use... |
| CVE-2020-27386 | HIGH | 8.8 | 72.9% | Nov 12, 2020 | An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and e... |
| CVE-2020-27385 | HIGH | 8.1 | 1.7% | Nov 12, 2020 | Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authenti... |
| CVE-2020-26805 | HIGH | 7.2 | 1.5% | Nov 12, 2020 | In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetai... |
| CVE-2020-26804 | HIGH | 8.8 | 1.4% | Nov 12, 2020 | In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users ... |
| CVE-2020-26803 | HIGH | 8.8 | 1.4% | Nov 12, 2020 | In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered f... |
| CVE-2020-24525 | HIGH | 7.8 | 0.3% | Nov 12, 2020 | Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potenti... |
| CVE-2020-24456 | HIGH | 7.8 | 0.3% | Nov 12, 2020 | Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentiall... |
| CVE-2020-24454 | HIGH | 7.5 | 1.2% | Nov 12, 2020 | Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before versi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now