2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13548 | HIGH | 8.8 | 66.7% | Feb 10, 2021 | In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lea... |
| CVE-2020-7021 | MEDIUM | 4.9 | 1.3% | Feb 10, 2021 | Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_req... |
| CVE-2020-26299 | CRITICAL | 9.6 | 1.9% | Feb 10, 2021 | ftp-srv is an open-source FTP server designed to be simple yet configurable. In ftp-srv before version 4.4.0 there is a ... |
| CVE-2020-5023 | HIGH | 7.5 | 2.3% | Feb 10, 2021 | IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause th... |
| CVE-2020-13546 | HIGH | 7.8 | 1.4% | Feb 10, 2021 | In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted document can cause the d... |
| CVE-2020-24838 | HIGH | 7.5 | 1.4% | Feb 10, 2021 | An integer overflow has been found in the the latest version of Issuer. The total issuedCount can be zero if the paramet... |
| CVE-2020-24837 | HIGH | 7.5 | 1.6% | Feb 10, 2021 | An integer underflow has been found in the latest version of ZCFees. The variables 'currPeriodIdx' and 'lastPeriodExecId... |
| CVE-2020-29171 | MEDIUM | 6.1 | 1.5% | Feb 10, 2021 | Cross-site scripting (XSS) vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP... |
| CVE-2020-36244 | CRITICAL | 9.8 | 4.2% | Feb 10, 2021 | The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to a heap-based buffer overflow that could allow an a... |
| CVE-2020-28871 | CRITICAL | 9.8 | 85.8% | Feb 10, 2021 | Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the s... |
| CVE-2020-28870 | CRITICAL | 9.8 | 3.1% | Feb 10, 2021 | In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /m... |
| CVE-2020-35125 | CRITICAL | 9.6 | 2.7% | Feb 9, 2021 | A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inje... |
| CVE-2020-26196 | MEDIUM | 5.5 | 0.3% | Feb 9, 2021 | Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the ... |
| CVE-2020-26195 | MEDIUM | 5.3 | 1.8% | Feb 9, 2021 | Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneou... |
| CVE-2020-26194 | HIGH | 7.8 | 0.3% | Feb 9, 2021 | Dell EMC PowerScale OneFS versions 8.1.2 and 8.2.2 contain an Incorrect Permission Assignment for a Critical Resource vu... |
| CVE-2020-26193 | HIGH | 7.8 | 0.5% | Feb 9, 2021 | Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the ISI... |
| CVE-2020-26192 | HIGH | 7.8 | 0.3% | Feb 9, 2021 | Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A non-admin user with eit... |
| CVE-2020-26191 | HIGH | 7.8 | 0.3% | Feb 9, 2021 | Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISI_PRIV_JOB_... |
| CVE-2020-14343 | CRITICAL | 9.8 | 6.0% | Feb 9, 2021 | A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code e... |
| CVE-2020-22839 | MEDIUM | 6.1 | 4.5% | Feb 9, 2021 | Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allow... |
| CVE-2020-28645 | CRITICAL | 9.1 | 1.2% | Feb 9, 2021 | Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to reg... |
| CVE-2020-28644 | MEDIUM | 4.3 | 0.5% | Feb 9, 2021 | The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against so... |
| CVE-2020-18215 | HIGH | 8.8 | 2.0% | Feb 9, 2021 | Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the (1) ad_id, (2) menu_id, and (3) cashout... |
| CVE-2020-13117 | CRITICAL | 9.8 | 68.8% | Feb 9, 2021 | Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands ... |
| CVE-2020-35943 | MEDIUM | 6.5 | 0.7% | Feb 9, 2021 | A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload. (... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now