2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25239 | HIGH | 8.8 | 0.9% | Mar 15, 2021 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow una... |
| CVE-2020-25236 | MEDIUM | 5.5 | 0.3% | Mar 15, 2021 | A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD0... |
| CVE-2020-24877 | CRITICAL | 9.8 | 2.1% | Mar 15, 2021 | A SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to a possible access rest... |
| CVE-2020-4184 | HIGH | 7.3 | 0.8% | Mar 15, 2021 | IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, wh... |
| CVE-2020-35358 | CRITICAL | 9.8 | 2.4% | Mar 15, 2021 | DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, bot... |
| CVE-2020-35682 | HIGH | 8.8 | 7.2% | Mar 13, 2021 | Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML login). |
| CVE-2020-4831 | HIGH | 7.5 | 0.8% | Mar 12, 2021 | IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an a... |
| CVE-2020-36282 | CRITICAL | 9.8 | 2.8% | Mar 12, 2021 | JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result i... |
| CVE-2020-36281 | HIGH | 7.5 | 2.9% | Mar 12, 2021 | Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c. |
| CVE-2020-36280 | HIGH | 7.5 | 2.4% | Mar 12, 2021 | Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c. |
| CVE-2020-36279 | HIGH | 7.5 | 2.6% | Mar 12, 2021 | Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptm... |
| CVE-2020-36278 | HIGH | 7.5 | 2.9% | Mar 12, 2021 | Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c. |
| CVE-2020-24984 | HIGH | 8.8 | 0.6% | Mar 11, 2021 | An issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an attacker may be able to tri... |
| CVE-2020-24983 | HIGH | 8.8 | 0.6% | Mar 11, 2021 | An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTM... |
| CVE-2020-36277 | HIGH | 7.5 | 2.4% | Mar 11, 2021 | Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in ... |
| CVE-2020-29045 | CRITICAL | 9.8 | 30.8% | Mar 11, 2021 | The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of ... |
| CVE-2020-14989 | MEDIUM | 6.5 | 0.6% | Mar 11, 2021 | An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows CSRF if the attacker use... |
| CVE-2020-14988 | MEDIUM | 5.4 | 0.6% | Mar 11, 2021 | An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows XSS in the login page vi... |
| CVE-2020-14987 | HIGH | 7.2 | 3.5% | Mar 11, 2021 | An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows remote attackers to exec... |
| CVE-2020-5025 | HIGH | 7.8 | 0.6% | Mar 11, 2021 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to... |
| CVE-2020-5024 | HIGH | 7.5 | 2.0% | Mar 11, 2021 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthe... |
| CVE-2020-4976 | MEDIUM | 4.4 | 0.3% | Mar 11, 2021 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local us... |
| CVE-2020-1900 | CRITICAL | 9.8 | 1.4% | Mar 11, 2021 | When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property arr... |
| CVE-2020-1899 | HIGH | 7.5 | 1.2% | Mar 11, 2021 | The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This ... |
| CVE-2020-1898 | HIGH | 7.5 | 1.2% | Mar 11, 2021 | The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructe... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now