2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7036 | MEDIUM | 6.5 | 1.0% | Apr 23, 2021 | An XML External Entities (XXE)vulnerability in Callback Assist could allow an authenticated, remote attacker to gain rea... |
| CVE-2020-7035 | MEDIUM | 6.5 | 1.1% | Apr 23, 2021 | An XML External Entities (XXE)vulnerability in the web-based user interface of Avaya Aura Orchestration Designer could a... |
| CVE-2020-7034 | HIGH | 8.8 | 2.4% | Apr 23, 2021 | A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote... |
| CVE-2020-17542 | MEDIUM | 5.4 | 0.8% | Apr 23, 2021 | Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious p... |
| CVE-2020-7385 | HIGH | 8.8 | 1.8% | Apr 23, 2021 | By launching the drb_remote_codeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the sa... |
| CVE-2020-36321 | HIGH | 7.5 | 1.2% | Apr 23, 2021 | Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 (Vaadin 14.0.... |
| CVE-2020-36320 | HIGH | 7.5 | 2.0% | Apr 23, 2021 | Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 (Vaadin 7.0.0 ... |
| CVE-2020-36319 | MEDIUM | 6.5 | 1.0% | Apr 23, 2021 | Insecure configuration of default ObjectMapper in com.vaadin:flow-server versions 3.0.0 through 3.0.5 (Vaadin 15.0.0 thr... |
| CVE-2020-17564 | CRITICAL | 9.1 | 2.6% | Apr 22, 2021 | Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to ... |
| CVE-2020-17563 | CRITICAL | 9.1 | 2.6% | Apr 22, 2021 | Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to ... |
| CVE-2020-27738 | HIGH | 7.4 | 3.7% | Apr 22, 2021 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ether... |
| CVE-2020-27737 | MEDIUM | 6.5 | 3.6% | Apr 22, 2021 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ether... |
| CVE-2020-27736 | MEDIUM | 6.5 | 3.6% | Apr 22, 2021 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ether... |
| CVE-2020-27009 | HIGH | 8.1 | 7.2% | Apr 22, 2021 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ether... |
| CVE-2020-26997 | HIGH | 7.8 | 1.0% | Apr 22, 2021 | A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < ... |
| CVE-2020-25244 | HIGH | 8.4 | 0.2% | Apr 22, 2021 | A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). The software insecurely loads libraries... |
| CVE-2020-25243 | MEDIUM | 5.1 | 0.3% | Apr 22, 2021 | A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be trigg... |
| CVE-2020-15795 | HIGH | 8.1 | 6.4% | Apr 22, 2021 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ether... |
| CVE-2020-7861 | CRITICAL | 9.8 | 1.5% | Apr 22, 2021 | AnySupport (Remote support solution) before 2019.3.21.0 allows directory traversing because of swprintf function to copy... |
| CVE-2020-7858 | HIGH | 8.6 | 1.1% | Apr 22, 2021 | There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download p... |
| CVE-2020-27569 | HIGH | 7.5 | 0.9% | Apr 21, 2021 | Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is ... |
| CVE-2020-27568 | HIGH | 7.5 | 1.6% | Apr 21, 2021 | Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found... |
| CVE-2020-36324 | MEDIUM | 6.1 | 0.6% | Apr 21, 2021 | Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the ... |
| CVE-2020-28973 | HIGH | 7.5 | 1.0% | Apr 21, 2021 | The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in... |
| CVE-2020-23932 | MEDIUM | 5.5 | 0.8% | Apr 21, 2021 | An issue was discovered in gpac before 1.0.1. A NULL pointer dereference exists in the function dump_isom_sdp located in... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now