2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-24682HIGH7.8Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation ...
CVE-2020-24681HIGH8.8Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation Studio allow...
CVE-2020-36771HIGH7.8CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations th...
CVE-2020-17163HIGH7.8Visual Studio Code Python Extension Remote Code Execution Vulnerability
CVE-2020-17483HIGH7.5An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive information...
CVE-2020-10676HIGH8.8In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have ce...
CVE-2020-28369HIGH7.8In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be...
CVE-2020-12614HIGH7.8An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is select...
CVE-2020-12612HIGH7.8An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When specifying a program to elevat...
CVE-2020-12615HIGH7.8An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to ...
CVE-2020-12613HIGH8.8An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. An attacker can spawn a process wit...
CVE-2020-28407HIGH7.1In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink at...
CVE-2020-36767HIGH7.5tinyfiledialogs (aka tiny file dialogs) before 3.8.0 allows shell metacharacters in titles, messages, and other input da...
CVE-2020-36714HIGH8.1The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_admin...
CVE-2020-36698HIGH8.8The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized user interaction in versions...
CVE-2020-27213HIGH7.5An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers (ISNs) for TCP connecti...
CVE-2020-18336HIGH7.4Cross Site Scripting (XSS) vulnerability found in Typora v.0.9.65 allows a remote attacker to obtain sensitive informati...
CVE-2020-19323HIGH7.5An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing...
CVE-2020-19318HIGH8.8Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows autho...
CVE-2020-24088HIGH7.8An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escal...
CVE-2020-10130HIGH8.8SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super adm...
CVE-2020-10129HIGH8.8SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality.
CVE-2020-35593HIGH7.8BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host.
CVE-2020-24165HIGH8.8An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate pri...
CVE-2020-35342HIGH7.5GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c)...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now