2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11189 | CRITICAL | 9.1 | 1.0% | Mar 17, 2021 | Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon... |
| CVE-2020-11188 | CRITICAL | 9.1 | 1.0% | Mar 17, 2021 | Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon... |
| CVE-2020-11186 | MEDIUM | 5.5 | 0.2% | Mar 17, 2021 | Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of inpu... |
| CVE-2020-11171 | CRITICAL | 9.1 | 1.0% | Mar 17, 2021 | Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon... |
| CVE-2020-11166 | CRITICAL | 9.1 | 0.9% | Mar 17, 2021 | Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC... |
| CVE-2020-28899 | CRITICAL | 9.1 | 1.6% | Mar 16, 2021 | The Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote un... |
| CVE-2020-24264 | CRITICAL | 9.8 | 4.1% | Mar 16, 2021 | Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote arbitrary code execution. T... |
| CVE-2020-24263 | HIGH | 8.8 | 1.6% | Mar 16, 2021 | Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code... |
| CVE-2020-4891 | MEDIUM | 5.5 | 0.2% | Mar 16, 2021 | IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account lockout setting that could... |
| CVE-2020-4890 | MEDIUM | 4.4 | 0.2% | Mar 16, 2021 | IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the RES... |
| CVE-2020-4851 | MEDIUM | 5.5 | 0.3% | Mar 16, 2021 | IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which co... |
| CVE-2020-1926 | MEDIUM | 5.9 | 2.5% | Mar 16, 2021 | Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing ... |
| CVE-2020-27290 | MEDIUM | 4.3 | 0.3% | Mar 15, 2021 | In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilato... |
| CVE-2020-27282 | MEDIUM | 4.3 | 0.3% | Mar 15, 2021 | In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows... |
| CVE-2020-27278 | MEDIUM | 5.2 | 0.3% | Mar 15, 2021 | In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, hard-coded credentials in the ventilator allow attackers... |
| CVE-2020-29553 | HIGH | 8.8 | 1.4% | Mar 15, 2021 | The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into v... |
| CVE-2020-29556 | MEDIUM | 5.5 | 1.0% | Mar 15, 2021 | The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files ... |
| CVE-2020-29555 | HIGH | 8.1 | 2.9% | Mar 15, 2021 | The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary file... |
| CVE-2020-28149 | CRITICAL | 9.6 | 1.9% | Mar 15, 2021 | myDBR 5.8.3/4262 is affected by: Cross Site Scripting (XSS). The impact is: execute arbitrary code (remote). The compone... |
| CVE-2020-24985 | HIGH | 8.1 | 1.1% | Mar 15, 2021 | An issue was discovered in Quadbase EspressReports ES 7 Update 9. An authenticated user is able to navigate to the MenuP... |
| CVE-2020-24982 | MEDIUM | 4.3 | 0.4% | Mar 15, 2021 | An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9. It allows CSRF. An attacker may be able to trick... |
| CVE-2020-28387 | MEDIUM | 5.5 | 0.9% | Mar 15, 2021 | A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < ... |
| CVE-2020-28385 | HIGH | 7.8 | 1.5% | Mar 15, 2021 | A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2021 (All Versions < ... |
| CVE-2020-25241 | HIGH | 7.5 | 1.0% | Mar 15, 2021 | A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the aff... |
| CVE-2020-25240 | HIGH | 8.8 | 0.9% | Mar 15, 2021 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can acces... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now