2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-2509 | CRITICAL | 9.8 | 34.2% | Apr 17, 2021 | A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows... |
| CVE-2020-9681 | MEDIUM | 6.5 | 0.7% | Apr 16, 2021 | Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An aut... |
| CVE-2020-9668 | HIGH | 7.8 | 1.6% | Apr 16, 2021 | Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling sy... |
| CVE-2020-9667 | MEDIUM | 6.5 | 0.5% | Apr 16, 2021 | Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An aut... |
| CVE-2020-28898 | MEDIUM | 5.3 | 1.3% | Apr 15, 2021 | In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a ... |
| CVE-2020-28593 | HIGH | 8.1 | 1.9% | Apr 15, 2021 | A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-AF... |
| CVE-2020-28592 | CRITICAL | 9.8 | 2.5% | Apr 15, 2021 | A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quar... |
| CVE-2020-27239 | CRITICAL | 9.8 | 0.9% | Apr 15, 2021 | An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The assetStatus para... |
| CVE-2020-27238 | CRITICAL | 9.8 | 0.9% | Apr 15, 2021 | An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter i... |
| CVE-2020-27237 | CRITICAL | 9.8 | 0.9% | Apr 15, 2021 | An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter i... |
| CVE-2020-7308 | MEDIUM | 6.5 | 0.5% | Apr 15, 2021 | Cleartext Transmission of Sensitive Information between McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Febru... |
| CVE-2020-7270 | MEDIUM | 4.3 | 0.8% | Apr 15, 2021 | Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows re... |
| CVE-2020-7269 | MEDIUM | 4.3 | 0.7% | Apr 15, 2021 | Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows re... |
| CVE-2020-36288 | MEDIUM | 6.1 | 1.5% | Apr 15, 2021 | The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before ver... |
| CVE-2020-35660 | MEDIUM | 5.4 | 0.9% | Apr 14, 2021 | Cross Site Scripting (XSS) in Monica before 2.19.1 via the journal page. |
| CVE-2020-28124 | MEDIUM | 5.4 | 0.5% | Apr 14, 2021 | Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field. |
| CVE-2020-35419 | MEDIUM | 6.1 | 0.7% | Apr 14, 2021 | Cross Site Scripting (XSS) in Group Office CRM 6.4.196 via the SET_LANGUAGE parameter. |
| CVE-2020-35418 | MEDIUM | 5.4 | 0.5% | Apr 14, 2021 | Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file. |
| CVE-2020-29593 | MEDIUM | 5.4 | 0.6% | Apr 14, 2021 | An issue was discovered in Orchard before 1.10. The Media Settings Allowed File Types list field allows an attacker to a... |
| CVE-2020-29592 | CRITICAL | 9.8 | 2.2% | Apr 14, 2021 | An issue was discovered in Orchard before 1.10. A broken access control issue in Orchard components that use the TinyMCE... |
| CVE-2020-36120 | HIGH | 7.5 | 1.2% | Apr 14, 2021 | Buffer Overflow in the "sixel_encoder_encode_bytes" function of Libsixel v1.8.6 allows attackers to cause a Denial of Se... |
| CVE-2020-21088 | MEDIUM | 4.8 | 0.8% | Apr 14, 2021 | Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by i... |
| CVE-2020-21087 | MEDIUM | 6.1 | 1.4% | Apr 14, 2021 | Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecti... |
| CVE-2020-19778 | CRITICAL | 9.8 | 2.1% | Apr 14, 2021 | Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges in "/index.php" by manip... |
| CVE-2020-36323 | HIGH | 8.2 | 2.0% | Apr 14, 2021 | In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now