2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28872 | CRITICAL | 9.8 | 3.3% | Apr 12, 2021 | An authorization bypass vulnerability in Monitorr v1.7.6m in Monitorr/assets/config/_installation/_register.php allows a... |
| CVE-2020-24285 | HIGH | 7.5 | 4.7% | Apr 12, 2021 | INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgi... |
| CVE-2020-36318 | CRITICAL | 9.8 | 1.7% | Apr 11, 2021 | In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than ... |
| CVE-2020-36317 | HIGH | 7.5 | 1.5% | Apr 11, 2021 | In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation ... |
| CVE-2020-23763 | CRITICAL | 9.8 | 1.9% | Apr 9, 2021 | SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass... |
| CVE-2020-23762 | MEDIUM | 5.4 | 0.8% | Apr 9, 2021 | Cross Site Scripting (XSS) vulnerability in the Larsens Calender plugin Version <= 1.2 for WordPress allows remote attac... |
| CVE-2020-23761 | MEDIUM | 6.1 | 1.0% | Apr 9, 2021 | Cross Site Scripting (XSS) vulnerability in subrion CMS Version <= 4.2.1 allows remote attackers to execute arbitrary we... |
| CVE-2020-13592 | HIGH | 8.8 | 1.5% | Apr 9, 2021 | An exploitable SQL injection vulnerability exists in "global_lists/choices" page of the Rukovoditel Project Management A... |
| CVE-2020-13591 | HIGH | 8.8 | 1.5% | Apr 9, 2021 | An exploitable SQL injection vulnerability exists in the "access_rules/rules_form" page of the Rukovoditel Project Manag... |
| CVE-2020-13587 | HIGH | 8.8 | 1.5% | Apr 9, 2021 | An exploitable SQL injection vulnerability exists in the "forms_fields_rules/rules" page of the Rukovoditel Project Mana... |
| CVE-2020-13534 | HIGH | 7.8 | 0.9% | Apr 9, 2021 | A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream R... |
| CVE-2020-13533 | HIGH | 7.8 | 0.4% | Apr 9, 2021 | A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following regist... |
| CVE-2020-13532 | HIGH | 7.8 | 0.4% | Apr 9, 2021 | A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashbo... |
| CVE-2020-21884 | HIGH | 8.8 | 1.2% | Apr 9, 2021 | Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF)... |
| CVE-2020-21883 | HIGH | 8.8 | 6.0% | Apr 9, 2021 | Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerabili... |
| CVE-2020-36287 | MEDIUM | 5.3 | 9.0% | Apr 9, 2021 | The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center befor... |
| CVE-2020-6590 | HIGH | 7.5 | 1.0% | Apr 8, 2021 | Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information dis... |
| CVE-2020-14106 | MEDIUM | 5.5 | 0.7% | Apr 8, 2021 | The application in the mobile phone can unauthorized access to the list of running processes in the mobile phone, Xiaomi... |
| CVE-2020-14103 | MEDIUM | 5.5 | 0.7% | Apr 8, 2021 | The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15. |
| CVE-2020-14104 | HIGH | 8.1 | 0.7% | Apr 8, 2021 | A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50. |
| CVE-2020-14099 | HIGH | 7.5 | 0.6% | Apr 8, 2021 | On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backu... |
| CVE-2020-23539 | HIGH | 7.5 | 1.8% | Apr 8, 2021 | An issue was discovered in Realtek rtl8723de BLE Stack <= 4.1 that allows remote attackers to cause a Denial of Service ... |
| CVE-2020-8630 | — | — | — | Apr 8, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
| CVE-2020-8629 | — | — | — | Apr 8, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
| CVE-2020-8628 | — | — | — | Apr 8, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now