2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36364 | CRITICAL | 9.1 | 1.8% | May 19, 2021 | An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0. Administration/Controllers/ImportController.cs a... |
| CVE-2020-20266 | MEDIUM | 6.5 | 2.1% | May 19, 2021 | Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/dot1x proces... |
| CVE-2020-20264 | MEDIUM | 6.5 | 2.1% | May 19, 2021 | Mikrotik RouterOs before 6.47 (stable tree) in the /ram/pckg/advanced-tools/nova/bin/netwatch process. An authenticated ... |
| CVE-2020-20246 | MEDIUM | 6.5 | 2.7% | May 18, 2021 | Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the mactel process. An authenticated r... |
| CVE-2020-20245 | MEDIUM | 6.5 | 2.7% | May 18, 2021 | Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the log process. An authenticated remo... |
| CVE-2020-20227 | MEDIUM | 6.5 | 3.1% | May 18, 2021 | Mikrotik RouterOs stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenti... |
| CVE-2020-20220 | MEDIUM | 6.5 | 2.7% | May 18, 2021 | Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process. An a... |
| CVE-2020-19924 | MEDIUM | 5.4 | 0.5% | May 18, 2021 | In Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks. |
| CVE-2020-20237 | MEDIUM | 6.5 | 2.8% | May 18, 2021 | Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. ... |
| CVE-2020-20236 | MEDIUM | 6.5 | 3.3% | May 18, 2021 | Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. ... |
| CVE-2020-20222 | MEDIUM | 6.5 | 3.2% | May 18, 2021 | Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer proces... |
| CVE-2020-20214 | MEDIUM | 6.5 | 3.1% | May 18, 2021 | Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the btest process. An authe... |
| CVE-2020-18178 | CRITICAL | 9.8 | 1.7% | May 18, 2021 | Path Traversal in HongCMS v4.0.0 allows remote attackers to view, edit, and delete arbitrary files via a crafted POST re... |
| CVE-2020-24740 | MEDIUM | 4.3 | 0.4% | May 18, 2021 | An issue was discovered in Pluck 4.7.10-dev2. There is a CSRF vulnerability that can editpage via a /admin.php?action=ed... |
| CVE-2020-23861 | MEDIUM | 5.5 | 0.6% | May 18, 2021 | A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.... |
| CVE-2020-20951 | CRITICAL | 9.8 | 4.0% | May 18, 2021 | In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files. |
| CVE-2020-24026 | MEDIUM | 6.1 | 0.9% | May 18, 2021 | TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0. Ti... |
| CVE-2020-23856 | MEDIUM | 5.5 | 0.4% | May 18, 2021 | Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could c... |
| CVE-2020-23852 | MEDIUM | 5.5 | 0.7% | May 18, 2021 | A heap based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) f... |
| CVE-2020-23851 | MEDIUM | 5.5 | 0.7% | May 18, 2021 | A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) ... |
| CVE-2020-20254 | MEDIUM | 6.5 | 2.1% | May 18, 2021 | Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/lcdstat proc... |
| CVE-2020-20253 | MEDIUM | 6.5 | 2.1% | May 18, 2021 | Mikrotik RouterOs before 6.47 (stable tree) suffers from a divison by zero vulnerability in the /nova/bin/lcdstat proces... |
| CVE-2020-25709 | HIGH | 7.5 | 2.9% | May 18, 2021 | A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s... |
| CVE-2020-15279 | LOW | 3.3 | 0.5% | May 18, 2021 | An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows ver... |
| CVE-2020-24755 | HIGH | 7.8 | 0.6% | May 17, 2021 | In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now