2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-26929HIGH8Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100 ...
CVE-2020-26921HIGH8.8Certain NETGEAR devices are affected by authentication bypass. This affects GS110EMX before 1.0.1.7, GS810EMX before 1.7...
CVE-2020-26920HIGH8.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5....
CVE-2020-26914HIGH7.1Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.38,...
CVE-2020-26912HIGH8.8Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before ...
CVE-2020-26911HIGH8.8Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6200 before 1.1.00.3...
CVE-2020-26909HIGH8.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0....
CVE-2020-26907HIGH8.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2...
CVE-2020-26906HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26905HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26904HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26903HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26902HIGH8.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2...
CVE-2020-26900HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26898HIGH8.8NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings.
CVE-2020-26897HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26522HIGH8.8A cross-site request forgery (CSRF) vulnerability in mod/user/act_user.php in Garfield Petshop through 2020-10-01 allows...
CVE-2020-15838HIGH8.8The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the _LTUPDATE folder h...
CVE-2020-26894HIGH7.8LiveCode v9.6.1 on Windows allows local, low-privileged users to gain privileges by creating a malicious "cmd.exe" in th...
CVE-2020-9048HIGH8.1A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could a...
CVE-2020-26802HIGH8.8forma.lms 2.3.0.2 is affected by Cross Site Request Forgery (CSRF) in formalms/appCore/index.php?r=lms/profile/show&ap=s...
CVE-2020-10816HIGH7.5Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed ser...
CVE-2020-4799HIGH7.8IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds wri...
CVE-2020-4280HIGH8.8IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecur...
CVE-2020-13340HIGH8.7An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job ...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now