2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35617 | — | — | — | Feb 15, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-1974 | — | — | — | Feb 15, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-1973 | — | — | — | Feb 15, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-1972 | — | — | — | Feb 15, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-1970 | — | — | — | Feb 15, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-1969 | — | — | — | Feb 15, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-1966 | — | — | — | Feb 15, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-35734 | HIGH | 7.2 | 6.8% | Feb 15, 2021 | Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution)... |
| CVE-2020-35500 | — | — | — | Feb 15, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-29143 | HIGH | 7.2 | 1.8% | Feb 15, 2021 | A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authentica... |
| CVE-2020-29140 | HIGH | 7.2 | 1.8% | Feb 15, 2021 | A SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0.2.5 allows a remote aut... |
| CVE-2020-29139 | HIGH | 7.2 | 1.8% | Feb 15, 2021 | A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0... |
| CVE-2020-29142 | HIGH | 7.2 | 1.8% | Feb 15, 2021 | A SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.5 allows a remote authe... |
| CVE-2020-28337 | HIGH | 7.2 | 16.6% | Feb 15, 2021 | A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to g... |
| CVE-2020-24899 | HIGH | 8.8 | 13.1% | Feb 15, 2021 | Nagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user can inject additional ... |
| CVE-2020-22427 | HIGH | 7.2 | 12.6% | Feb 15, 2021 | NagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability. An authenticated nagiosadmin user can inject... |
| CVE-2020-22425 | HIGH | 8.8 | 2.5% | Feb 15, 2021 | Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional... |
| CVE-2020-35512 | HIGH | 7.8 | 0.3% | Feb 15, 2021 | A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1... |
| CVE-2020-29031 | HIGH | 8.1 | 0.7% | Feb 15, 2021 | An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated ... |
| CVE-2020-29026 | MEDIUM | 6.5 | 1.5% | Feb 15, 2021 | A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated a... |
| CVE-2020-4956 | MEDIUM | 4.8 | 0.4% | Feb 15, 2021 | IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows cer... |
| CVE-2020-4955 | HIGH | 8 | 0.6% | Feb 15, 2021 | IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system,... |
| CVE-2020-4954 | MEDIUM | 5.4 | 0.5% | Feb 15, 2021 | IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, ... |
| CVE-2020-35775 | CRITICAL | 9.8 | 13.3% | Feb 15, 2021 | CITSmart before 9.1.2.23 allows LDAP Injection. |
| CVE-2020-28500 | MEDIUM | 5.3 | 7.3% | Feb 15, 2021 | Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim a... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now