2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9014 | MEDIUM | 5.5 | 0.4% | Feb 5, 2021 | In Epson iProjection v2.30, the driver file (EMP_NSAU.sys) allows local users to cause a denial of service (BSOD) via cr... |
| CVE-2020-18750 | HIGH | 7.8 | 0.5% | Feb 5, 2021 | Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file. |
| CVE-2020-10234 | MEDIUM | 6.5 | 3.8% | Feb 5, 2021 | The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send an IOCTL t... |
| CVE-2020-18737 | MEDIUM | 6.1 | 1.3% | Feb 5, 2021 | An issue was discovered in Typora 0.9.67. There is an XSS vulnerability that causes Remote Code Execution. |
| CVE-2020-4832 | MEDIUM | 5.5 | 0.3% | Feb 5, 2021 | IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discover... |
| CVE-2020-8807 | MEDIUM | 5.3 | 1.0% | Feb 5, 2021 | In Electric Coin Company Zcashd before 2.1.1-1, the time offset between messages could be leveraged to obtain sensitive ... |
| CVE-2020-8806 | HIGH | 7.5 | 1.0% | Feb 5, 2021 | Electric Coin Company Zcashd before 2.1.1-1 allows attackers to trigger consensus failure and double spending. A valid c... |
| CVE-2020-36241 | MEDIUM | 5.5 | 0.6% | Feb 5, 2021 | autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Dir... |
| CVE-2020-35765 | HIGH | 8.8 | 28.2% | Feb 5, 2021 | doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows ... |
| CVE-2020-18717 | CRITICAL | 9.8 | 3.6% | Feb 5, 2021 | SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filter... |
| CVE-2020-18716 | CRITICAL | 9.8 | 1.8% | Feb 5, 2021 | SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAc... |
| CVE-2020-18715 | — | — | — | Feb 5, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-18714 | CRITICAL | 9.8 | 1.3% | Feb 5, 2021 | SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordMo... |
| CVE-2020-18713 | CRITICAL | 9.8 | 1.8% | Feb 5, 2021 | SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in custom... |
| CVE-2020-10539 | CRITICAL | 9.8 | 1.5% | Feb 5, 2021 | An issue was discovered in Epikur before 20.1.1. The Epikur server contains the checkPasswort() function that, upon user... |
| CVE-2020-10538 | MEDIUM | 5.5 | 0.3% | Feb 5, 2021 | An issue was discovered in Epikur before 20.1.1. It stores the secret passwords of the users as MD5 hashes in the databa... |
| CVE-2020-10537 | HIGH | 7.8 | 0.3% | Feb 5, 2021 | An issue was discovered in Epikur before 20.1.1. A Glassfish 4.1 server with a default configuration is running on TCP p... |
| CVE-2020-5032 | MEDIUM | 4.3 | 0.5% | Feb 4, 2021 | IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent p... |
| CVE-2020-4828 | MEDIUM | 6.5 | 0.8% | Feb 4, 2021 | IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning, cause... |
| CVE-2020-4827 | MEDIUM | 4.3 | 0.4% | Feb 4, 2021 | IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery... |
| CVE-2020-4826 | MEDIUM | 4.3 | 0.4% | Feb 4, 2021 | IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery... |
| CVE-2020-4825 | MEDIUM | 5.4 | 0.7% | Feb 4, 2021 | IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting. This... |
| CVE-2020-4640 | MEDIUM | 4.1 | 0.3% | Feb 4, 2021 | Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensit... |
| CVE-2020-27873 | MEDIUM | 6.5 | 0.6% | Feb 4, 2021 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETG... |
| CVE-2020-27872 | HIGH | 8.8 | 0.9% | Feb 4, 2021 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now