2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-14178HIGH7.5Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Infor...
CVE-2020-25067HIGH8.8NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker.
CVE-2020-25065HIGH7.5An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 softwar...
CVE-2020-25064HIGH7.5An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 softwar...
CVE-2020-25063HIGH7.5An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. An application crash can...
CVE-2020-25060HIGH7.8An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Local users can gain pri...
CVE-2020-25059HIGH7.5An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A service crash may occu...
CVE-2020-25056HIGH7.5An issue was discovered on Samsung mobile devices with Q(10.0) (Galaxy S20) software. Because HAL improperly checks vers...
CVE-2020-25051HIGH7.5An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can bypass Factory Reset P...
CVE-2020-25050HIGH7.5An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The CMC service allows attackers to ...
CVE-2020-2075HIGH7.5Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulksca...
CVE-2020-24354HIGH8.8Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell...
CVE-2020-7527HIGH7.8Incorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause elevation of privilege ...
CVE-2020-7526HIGH8.8Improper Input Validation vulnerability exists in PowerChute Business Edition (software V9.0.x and earlier) which could ...
CVE-2020-7525HIGH7.5Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and...
CVE-2020-7524HIGH7.5Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial ...
CVE-2020-7523HIGH7.8Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification...
CVE-2020-24363HIGH8.8TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP...
CVE-2020-20625HIGH7.5Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated S...
CVE-2020-15687HIGH7.5Missing access control restrictions in the Hypervisor component of the ACRN Project (v2.0 and v1.6.1) allow a malicious ...
CVE-2020-13593HIGH8.8The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R...
CVE-2020-11618HIGH7.8THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their TELNET service hardcoded to start ...
CVE-2020-25032HIGH7.5An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to...
CVE-2020-25031HIGH7.8checkinstall 1.6.2, when used to create a package that contains a symlink, may trigger the creation of a mode 0777 execu...
CVE-2020-8097HIGH7.8An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Sec...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now