2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-8366——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-8365——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-8364——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-8363——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-8362——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-8361——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-8360——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-8359——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-8358——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-28590MEDIUM6.5An out-of-bounds read vulnerability exists in the Obj File TriangleMesh::TriangleMesh() functionality of Slic3r libslic3...
CVE-2020-27236CRITICAL9.8An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the compnomenclatu...
CVE-2020-27235CRITICAL9.8An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the description pa...
CVE-2020-27234CRITICAL9.8An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the serviceUID par...
CVE-2020-27233CRITICAL9.8An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the supplierUID pa...
CVE-2020-27228HIGH7.8An incorrect default permissions vulnerability exists in the installation functionality of OpenClinic GA 5.173.3. Overwr...
CVE-2020-27227CRITICAL9.8An exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially crafted web requests can...
CVE-2020-13568HIGH8.8SQL injection vulnerability exists in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An at...
CVE-2020-13566HIGH8.8SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An a...
CVE-2020-15390CRITICAL9.8pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerabi...
CVE-2020-4965HIGH7.5IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt ...
CVE-2020-4964MEDIUM4.3IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a c...
CVE-2020-4920MEDIUM5.4IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed ar...
CVE-2020-7924MEDIUM6.5Usage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, ma...
CVE-2020-15734MEDIUM5.5An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file uplo...
CVE-2020-15942MEDIUM6.5An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now