2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-8889HIGH7.5The ShipStation.com plugin 1.0 for CS-Cart allows remote attackers to obtain sensitive information (via action=export) b...
CVE-2020-36666HIGH8.8The directory-pro WordPress plugin before 1.9.5, final-user-wp-frontend-user-profiles WordPress plugin before 1.2.2, pro...
CVE-2020-19786HIGH8.8File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and cod...
CVE-2020-4927HIGH8.2A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user dat...
CVE-2020-5002HIGH8.8IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions...
CVE-2020-36669HIGH8.8The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to Cross-Site Request Forgery in version...
CVE-2020-5026HIGH7.5IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote attac...
CVE-2020-5001HIGH7.5 IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the syst...
CVE-2020-36652HIGH7.1Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Ad...
CVE-2020-19824HIGH7An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parame...
CVE-2020-6817HIGH7.5bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to ...
CVE-2020-36661HIGH7.5A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects...
CVE-2020-24307HIGH7.8An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable file. NOTE: third partie...
CVE-2020-20402HIGH7.5Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via se...
CVE-2020-36659HIGH8.1In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connecting...
CVE-2020-36658HIGH8.1In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remo...
CVE-2020-36657HIGH7.8uptimed before 0.4.6-r1 on Gentoo allows local users (with access to the uptimed user account) to gain root privileges b...
CVE-2020-18329HIGH7.5An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attacke...
CVE-2020-36655HIGH8.8Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field....
CVE-2020-25502HIGH7.8Cybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijack...
CVE-2020-22662HIGH7.5In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n ...
CVE-2020-22660HIGH7.5In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n ...
CVE-2020-22659HIGH7.5In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n ...
CVE-2020-22656HIGH7.5In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n ...
CVE-2020-22655HIGH7.5In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n ...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now