2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12733 | HIGH | 7.5 | 1.3% | Jul 15, 2021 | Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET... |
| CVE-2020-12732 | MEDIUM | 6.5 | 0.9% | Jul 15, 2021 | DEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetion_xxxxxxxx with a password of 12345678. |
| CVE-2020-25736 | HIGH | 7.8 | 2.2% | Jul 15, 2021 | Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC... |
| CVE-2020-25593 | MEDIUM | 6.7 | 0.3% | Jul 15, 2021 | Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder per... |
| CVE-2020-15495 | HIGH | 7.8 | 0.3% | Jul 15, 2021 | Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service ... |
| CVE-2020-12731 | HIGH | 7.5 | 0.7% | Jul 15, 2021 | The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whe... |
| CVE-2020-12730 | MEDIUM | 5.3 | 0.2% | Jul 15, 2021 | MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery. |
| CVE-2020-12729 | MEDIUM | 4.6 | 0.3% | Jul 15, 2021 | MagicMotion Flamingo 2 has a lack of access control for reading from device descriptors. |
| CVE-2020-15496 | HIGH | 7.8 | 0.2% | Jul 15, 2021 | Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions. |
| CVE-2020-36420 | HIGH | 7.5 | 1.9% | Jul 15, 2021 | Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a mal... |
| CVE-2020-24133 | CRITICAL | 9.8 | 2.6% | Jul 14, 2021 | A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows att... |
| CVE-2020-29157 | HIGH | 7.8 | 0.5% | Jul 14, 2021 | An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when the service or system ... |
| CVE-2020-18155 | CRITICAL | 9.8 | 1.3% | Jul 14, 2021 | SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection. |
| CVE-2020-18151 | MEDIUM | 6.5 | 0.5% | Jul 14, 2021 | Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF v5.1.0, which can add an admin account. |
| CVE-2020-18145 | MEDIUM | 6.1 | 0.8% | Jul 14, 2021 | Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php. |
| CVE-2020-29147 | HIGH | 7.5 | 1.1% | Jul 14, 2021 | A SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows attackers to obtain sensitiv... |
| CVE-2020-29146 | MEDIUM | 6.1 | 0.7% | Jul 14, 2021 | A cross site scripting (XSS) vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scr... |
| CVE-2020-18144 | CRITICAL | 9.8 | 1.1% | Jul 14, 2021 | SQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php. |
| CVE-2020-27379 | MEDIUM | 6.5 | 0.5% | Jul 14, 2021 | Cross Site Request Forgery (CSRF) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 . The CSRF ... |
| CVE-2020-25445 | HIGH | 7.8 | 0.9% | Jul 14, 2021 | The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input ... |
| CVE-2020-25444 | MEDIUM | 5.4 | 0.6% | Jul 14, 2021 | Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the (1) "About... |
| CVE-2020-20231 | MEDIUM | 6.5 | 2.0% | Jul 14, 2021 | Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet p... |
| CVE-2020-0417 | HIGH | 7.8 | 0.1% | Jul 14, 2021 | In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable Pend... |
| CVE-2020-19722 | MEDIUM | 6.5 | 1.0% | Jul 13, 2021 | An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer deref... |
| CVE-2020-19721 | MEDIUM | 6.5 | 1.2% | Jul 13, 2021 | A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while runn... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now