2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11210 | HIGH | 8.8 | 0.2% | Apr 7, 2021 | Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Indust... |
| CVE-2020-11191 | CRITICAL | 9.1 | 0.9% | Apr 7, 2021 | Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon... |
| CVE-2020-36313 | HIGH | 7.8 | 0.3% | Apr 7, 2021 | An issue was discovered in the Linux kernel before 5.7. The KVM subsystem allows out-of-range access to memslots after a... |
| CVE-2020-36312 | MEDIUM | 5.5 | 0.3% | Apr 7, 2021 | An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory le... |
| CVE-2020-36311 | MEDIUM | 5.5 | 0.3% | Apr 7, 2021 | An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of ser... |
| CVE-2020-36310 | MEDIUM | 5.5 | 0.3% | Apr 7, 2021 | An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a set_memory_region_test infinite ... |
| CVE-2020-13422 | HIGH | 8.1 | 0.9% | Apr 6, 2021 | OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative action... |
| CVE-2020-13421 | CRITICAL | 9.8 | 1.1% | Apr 6, 2021 | OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset act... |
| CVE-2020-13420 | CRITICAL | 9.8 | 2.0% | Apr 6, 2021 | OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script. |
| CVE-2020-13419 | MEDIUM | 5.3 | 1.2% | Apr 6, 2021 | OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task. |
| CVE-2020-13418 | MEDIUM | 6.1 | 0.6% | Apr 6, 2021 | OpenIAM before 4.2.0.3 allows XSS in the Add New User feature. |
| CVE-2020-36309 | MEDIUM | 5.3 | 1.3% | Apr 6, 2021 | ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when usin... |
| CVE-2020-36285 | HIGH | 7.5 | 0.9% | Apr 6, 2021 | Union Pay up to 3.3.12, for iOS mobile apps, contains a CWE-347: Improper Verification of Cryptographic Signature vulner... |
| CVE-2020-36284 | HIGH | 7.5 | 0.9% | Apr 6, 2021 | Union Pay up to 3.4.93.4.9, for android, contains a CWE-347: Improper Verification of Cryptographic Signature vulnerabil... |
| CVE-2020-23533 | HIGH | 7.5 | 0.9% | Apr 6, 2021 | Union Pay up to 1.2.0, for web based versions contains a CWE-347: Improper Verification of Cryptographic Signature vulne... |
| CVE-2020-36308 | MEDIUM | 5.3 | 1.0% | Apr 6, 2021 | Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performin... |
| CVE-2020-36307 | MEDIUM | 6.1 | 0.7% | Apr 6, 2021 | Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links. |
| CVE-2020-36306 | MEDIUM | 6.1 | 0.7% | Apr 6, 2021 | Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field. |
| CVE-2020-17453 | MEDIUM | 6.1 | 26.1% | Apr 5, 2021 | WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter. |
| CVE-2020-19596 | CRITICAL | 9.8 | 1.3% | Apr 5, 2021 | Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username. |
| CVE-2020-19595 | HIGH | 7.5 | 1.1% | Apr 5, 2021 | Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username. |
| CVE-2020-4997 | MEDIUM | 5.4 | 0.5% | Apr 5, 2021 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2020-4792 | MEDIUM | 5.4 | 0.5% | Apr 5, 2021 | IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i... |
| CVE-2020-27600 | CRITICAL | 9.8 | 13.9% | Apr 2, 2021 | HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to exe... |
| CVE-2020-21590 | MEDIUM | 4.3 | 1.3% | Apr 2, 2021 | Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbit... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now