2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-12507HIGH8.8In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL inj...
CVE-2020-12931HIGH7.8Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their p...
CVE-2020-12930HIGH7.8Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their priv...
CVE-2020-12509HIGH7.5In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path trave...
CVE-2020-4099HIGH7.5The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forge...
CVE-2020-12744HIGH7.8The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during ...
CVE-2020-23648HIGH7.5Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability. Through system.asp / start_apply.htm, an...
CVE-2020-8976HIGH8.8The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attac...
CVE-2020-8975HIGH7.5ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, allows a remote attacker with access to the web ap...
CVE-2020-8973HIGH8.1ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, does not properly accept specially constructed req...
CVE-2020-35675HIGH8.8BigProf Online Invoicing System before 3.0 offers a functionality that allows an administrator to move the records of me...
CVE-2020-15341HIGH7.5Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API.
CVE-2020-15340HIGH7.5Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turbolin...
CVE-2020-15327HIGH7.5Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication.
CVE-2020-36521HIGH7.1An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS ...
CVE-2020-36604HIGH8.1hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.
CVE-2020-36601HIGH7.5Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic...
CVE-2020-36600HIGH7.5Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cau...
CVE-2020-23560HIGH7.8IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab.
CVE-2020-23559HIGH7.8IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f.
CVE-2020-23558HIGH7.8IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.
CVE-2020-23557HIGH7.8IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.
CVE-2020-23556HIGH7.8IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28.
CVE-2020-23555HIGH7.8IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e.
CVE-2020-23554HIGH7.8IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20.

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now