2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25079 | HIGH | 8.8 | 52.7% | Sep 2, 2020 | An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.c... |
| CVE-2020-25078 | HIGH | 7.5 | 97.9% | Sep 2, 2020 | An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticate... |
| CVE-2020-16602 | HIGH | 8.1 | 6.0% | Sep 2, 2020 | Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a ra... |
| CVE-2020-5622 | HIGH | 7.5 | 1.3% | Sep 2, 2020 | Shadankun Server Security Type (excluding normal blocking method types) Ver.1.5.3 and earlier allows remote attackers to... |
| CVE-2020-24955 | HIGH | 7.8 | 0.9% | Sep 1, 2020 | SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivilege... |
| CVE-2020-6152 | HIGH | 7.8 | 1.9% | Sep 1, 2020 | A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7. A spe... |
| CVE-2020-5776 | HIGH | 8.8 | 14.7% | Sep 1, 2020 | Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is poss... |
| CVE-2020-25070 | HIGH | 8.8 | 0.5% | Sep 1, 2020 | USVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature. |
| CVE-2020-16208 | HIGH | 8.8 | 1.2% | Sep 1, 2020 | The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different config... |
| CVE-2020-24559 | HIGH | 7.8 | 0.8% | Sep 1, 2020 | A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services... |
| CVE-2020-24558 | HIGH | 7.1 | 0.6% | Sep 1, 2020 | A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Servi... |
| CVE-2020-24557 | HIGH | 7.8 | 2.6% | Sep 1, 2020 | A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an atta... |
| CVE-2020-24556 | HIGH | 7.8 | 0.8% | Sep 1, 2020 | A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business ... |
| CVE-2020-6136 | HIGH | 8.8 | 1.8% | Sep 1, 2020 | An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specia... |
| CVE-2020-24034 | HIGH | 8.8 | 3.7% | Sep 1, 2020 | Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated u... |
| CVE-2020-17405 | HIGH | 8.8 | 2.0% | Sep 1, 2020 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Senstar Symp... |
| CVE-2020-6135 | HIGH | 8.8 | 1.8% | Sep 1, 2020 | An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially c... |
| CVE-2020-23836 | HIGH | 8.8 | 0.6% | Sep 1, 2020 | A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) t... |
| CVE-2020-23829 | HIGH | 8.8 | 2.5% | Sep 1, 2020 | interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerabilit... |
| CVE-2020-23971 | HIGH | 7.5 | 1.5% | Sep 1, 2020 | gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload funct... |
| CVE-2020-6134 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page MassDr... |
| CVE-2020-6133 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page Course... |
| CVE-2020-6132 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerability exists in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page ChooseC... |
| CVE-2020-6128 | HIGH | 8.8 | 1.8% | Sep 1, 2020 | SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. A specially crafted HTTP requ... |
| CVE-2020-6127 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id parameter in the page ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now