2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28450 | HIGH | 8.6 | 1.8% | Feb 4, 2021 | This affects all versions of package decal. The vulnerability is in the extend function. |
| CVE-2020-28449 | HIGH | 8.6 | 1.8% | Feb 4, 2021 | This affects all versions of package decal. The vulnerability is in the set function. |
| CVE-2020-16194 | MEDIUM | 5.3 | 1.2% | Feb 4, 2021 | An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated at... |
| CVE-2020-6088 | HIGH | 7.5 | 3.5% | Feb 4, 2021 | An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Br... |
| CVE-2020-27249 | HIGH | 7.8 | 1.2% | Feb 4, 2021 | A specially crafted document can cause the document parser to copy data from a particular record type into a static-size... |
| CVE-2020-27248 | HIGH | 7.8 | 1.2% | Feb 4, 2021 | A specially crafted document can cause the document parser to copy data from a particular record type into a static-size... |
| CVE-2020-27247 | HIGH | 7.8 | 1.2% | Feb 4, 2021 | A specially crafted document can cause the document parser to copy data from a particular record type into a static-size... |
| CVE-2020-14247 | MEDIUM | 6.5 | 0.7% | Feb 4, 2021 | HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to... |
| CVE-2020-14246 | HIGH | 7.5 | 0.7% | Feb 4, 2021 | HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potenti... |
| CVE-2020-14245 | CRITICAL | 9.8 | 1.2% | Feb 4, 2021 | HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable ... |
| CVE-2020-13586 | HIGH | 7.8 | 1.5% | Feb 4, 2021 | A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software Gmb... |
| CVE-2020-13580 | HIGH | 7.8 | 72.6% | Feb 4, 2021 | An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMa... |
| CVE-2020-13579 | HIGH | 7.8 | 72.6% | Feb 4, 2021 | An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office... |
| CVE-2020-9390 | MEDIUM | 5.4 | 0.9% | Feb 3, 2021 | SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content... |
| CVE-2020-9389 | LOW | 3.7 | 0.9% | Feb 3, 2021 | A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented i... |
| CVE-2020-9388 | MEDIUM | 6.5 | 0.8% | Feb 3, 2021 | CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administ... |
| CVE-2020-8589 | LOW | 3.5 | 0.5% | Feb 3, 2021 | Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthoriz... |
| CVE-2020-8588 | LOW | 3.5 | 0.5% | Feb 3, 2021 | Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthoriz... |
| CVE-2020-18724 | MEDIUM | 5.4 | 3.2% | Feb 3, 2021 | Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19... |
| CVE-2020-18723 | MEDIUM | 5.4 | 3.8% | Feb 3, 2021 | Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code ... |
| CVE-2020-8294 | MEDIUM | 5.4 | 0.9% | Feb 3, 2021 | A missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows execution of a stored XSS attack usi... |
| CVE-2020-25857 | HIGH | 7.5 | 1.2% | Feb 3, 2021 | The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to ... |
| CVE-2020-25856 | HIGH | 8.1 | 2.2% | Feb 3, 2021 | The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and e... |
| CVE-2020-25855 | HIGH | 8.1 | 2.6% | Feb 3, 2021 | The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and exclu... |
| CVE-2020-25854 | HIGH | 8.1 | 2.6% | Feb 3, 2021 | The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and e... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now