2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-23517 | MEDIUM | 6.1 | 7.1% | Mar 26, 2021 | Cross Site Scripting (XSS) vulnerability in Aryanic HighMail (High CMS) versions 2020 and before allows remote attackers... |
| CVE-2020-10584 | HIGH | 7.5 | 2.2% | Mar 25, 2021 | A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) through 5.0 allows ... |
| CVE-2020-10583 | HIGH | 8.8 | 2.8% | Mar 25, 2021 | The /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attacke... |
| CVE-2020-10582 | CRITICAL | 9.8 | 1.6% | Mar 25, 2021 | A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) through 5.0 allows r... |
| CVE-2020-10581 | HIGH | 7.5 | 1.3% | Mar 25, 2021 | Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Management (... |
| CVE-2020-10580 | HIGH | 8.8 | 3.9% | Mar 25, 2021 | A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) through 5.0 allows re... |
| CVE-2020-10579 | HIGH | 7.5 | 2.2% | Mar 25, 2021 | A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) through 5.0 allows rem... |
| CVE-2020-35502 | HIGH | 7.5 | 2.4% | Mar 25, 2021 | A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is ... |
| CVE-2020-6790 | HIGH | 7.8 | 0.3% | Mar 25, 2021 | Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to a... |
| CVE-2020-6789 | HIGH | 7.8 | 0.3% | Mar 25, 2021 | Loading a DLL through an Uncontrolled Search Path Element in the Bosch Monitor Wall installer up to and including versio... |
| CVE-2020-6788 | HIGH | 7.8 | 0.3% | Mar 25, 2021 | Loading a DLL through an Uncontrolled Search Path Element in the Bosch Configuration Manager installer up to and includi... |
| CVE-2020-6787 | HIGH | 7.8 | 0.3% | Mar 25, 2021 | Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Client installer up to and including versio... |
| CVE-2020-6786 | HIGH | 7.8 | 0.3% | Mar 25, 2021 | Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Recording Manager installer up to and inclu... |
| CVE-2020-6785 | HIGH | 7.8 | 0.3% | Mar 25, 2021 | Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0... |
| CVE-2020-6771 | HIGH | 7.8 | 0.3% | Mar 25, 2021 | Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 poten... |
| CVE-2020-1946 | CRITICAL | 9.8 | 6.1% | Mar 25, 2021 | In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands w... |
| CVE-2020-7852 | HIGH | 7.8 | 0.9% | Mar 24, 2021 | DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is... |
| CVE-2020-7853 | CRITICAL | 9.8 | 0.8% | Mar 24, 2021 | An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range ... |
| CVE-2020-26283 | HIGH | 8.8 | 1.5% | Mar 24, 2021 | go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipf... |
| CVE-2020-26279 | HIGH | 8.1 | 1.7% | Mar 24, 2021 | go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipf... |
| CVE-2020-7839 | CRITICAL | 9.8 | 1.4% | Mar 24, 2021 | In MaEPSBroker 2.5.0.31 and prior, a command injection vulnerability caused by improper input validation checks when par... |
| CVE-2020-15809 | MEDIUM | 6.5 | 0.9% | Mar 24, 2021 | spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversa... |
| CVE-2020-36283 | HIGH | 8.8 | 0.7% | Mar 24, 2021 | HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode). By... |
| CVE-2020-35337 | CRITICAL | 9.8 | 1.9% | Mar 24, 2021 | ThinkSAAS before 3.38 contains a SQL injection vulnerability through app/topic/action/admin/topic.php via the title para... |
| CVE-2020-5015 | HIGH | 7.5 | 2.5% | Mar 24, 2021 | IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now