2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36651 | HIGH | 7.5 | 0.9% | Jan 18, 2023 | A vulnerability has been found in youngerheart nodeserver and classified as critical. Affected by this vulnerability is ... |
| CVE-2020-36611 | HIGH | 7.1 | 0.1% | Jan 17, 2023 | Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi T... |
| CVE-2020-36650 | HIGH | 8 | 2.1% | Jan 11, 2023 | A vulnerability, which was classified as critical, was found in IonicaBizau node-gry up to 5.x. This affects an unknown ... |
| CVE-2020-36649 | HIGH | 7.5 | 1.4% | Jan 11, 2023 | A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown ... |
| CVE-2020-36646 | HIGH | 7.5 | 1.2% | Jan 7, 2023 | A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztr... |
| CVE-2020-36562 | HIGH | 7.5 | 0.8% | Dec 28, 2022 | Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of servic... |
| CVE-2020-36568 | HIGH | 7.5 | 1.5% | Dec 27, 2022 | Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource ... |
| CVE-2020-36564 | HIGH | 7.5 | 0.7% | Dec 27, 2022 | Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed,... |
| CVE-2020-36559 | HIGH | 7.5 | 1.1% | Dec 27, 2022 | Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to re... |
| CVE-2020-36567 | HIGH | 7.5 | 1.4% | Dec 27, 2022 | Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbi... |
| CVE-2020-28191 | HIGH | 8.8 | 0.4% | Dec 26, 2022 | The console in Togglz before 2.9.4 allows CSRF. |
| CVE-2020-10650 | HIGH | 8.1 | 3.3% | Dec 26, 2022 | A deserialization flaw was discovered in jackson-databind through 2.9.10.4. It could allow an unauthenticated user to pe... |
| CVE-2020-12069 | HIGH | 7.8 | 0.2% | Dec 26, 2022 | In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system sto... |
| CVE-2020-12067 | HIGH | 7.5 | 0.5% | Dec 26, 2022 | In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed b... |
| CVE-2020-36629 | HIGH | 7.5 | 0.8% | Dec 25, 2022 | A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpath... |
| CVE-2020-26302 | HIGH | 7.5 | 0.9% | Dec 22, 2022 | is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vuln... |
| CVE-2020-15685 | HIGH | 8.8 | 0.9% | Dec 22, 2022 | During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated wi... |
| CVE-2020-15679 | HIGH | 7.6 | 0.5% | Dec 22, 2022 | An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL,... |
| CVE-2020-36625 | HIGH | 8.8 | 0.3% | Dec 22, 2022 | A vulnerability was found in destiny.gg chat. It has been rated as problematic. This issue affects the function websocke... |
| CVE-2020-36620 | HIGH | 7.5 | 1.3% | Dec 21, 2022 | A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerabil... |
| CVE-2020-20588 | HIGH | 8.8 | 1.2% | Dec 15, 2022 | File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to... |
| CVE-2020-36610 | HIGH | 8 | 0.5% | Dec 8, 2022 | A vulnerability was found in annyshow DuxCMS 2.1. It has been declared as problematic. This vulnerability affects unknow... |
| CVE-2020-23592 | HIGH | 8.8 | 0.5% | Nov 23, 2022 | A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenti... |
| CVE-2020-23585 | HIGH | 8.8 | 0.5% | Nov 23, 2022 | A remote attacker can conduct a cross-site request forgery (CSRF) attack on OPTILINK OP-XT71000N Hardware Version: V2.2 ... |
| CVE-2020-12508 | HIGH | 7.5 | 0.8% | Nov 15, 2022 | In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path trave... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now