2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25853 | HIGH | 7.5 | 1.2% | Feb 3, 2021 | The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excludi... |
| CVE-2020-17523 | CRITICAL | 9.8 | 85.9% | Feb 3, 2021 | Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentica... |
| CVE-2020-17516 | HIGH | 7.5 | 1.9% | Feb 3, 2021 | Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'r... |
| CVE-2020-35667 | HIGH | 7.5 | 1.3% | Feb 3, 2021 | JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials. |
| CVE-2020-35482 | MEDIUM | 5.4 | 1.5% | Feb 3, 2021 | SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS. |
| CVE-2020-35481 | CRITICAL | 9.8 | 1.3% | Feb 3, 2021 | SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection. |
| CVE-2020-2507 | CRITICAL | 9.8 | 2.7% | Feb 3, 2021 | The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerabili... |
| CVE-2020-2506 | CRITICAL | 9.8 | 2.0% | Feb 3, 2021 | The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulne... |
| CVE-2020-29582 | MEDIUM | 5.3 | 2.6% | Feb 3, 2021 | In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker wa... |
| CVE-2020-28895 | HIGH | 7.3 | 1.5% | Feb 3, 2021 | In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated b... |
| CVE-2020-28653 | CRITICAL | 9.8 | 78.7% | Feb 3, 2021 | Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution v... |
| CVE-2020-28001 | MEDIUM | 5.4 | 3.8% | Feb 3, 2021 | SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS. |
| CVE-2020-27994 | MEDIUM | 6.5 | 3.9% | Feb 3, 2021 | SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal. |
| CVE-2020-27222 | HIGH | 7.5 | 0.9% | Feb 3, 2021 | In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, ... |
| CVE-2020-25208 | MEDIUM | 5.3 | 1.4% | Feb 3, 2021 | In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permiss... |
| CVE-2020-29166 | HIGH | 7.5 | 2.3% | Feb 3, 2021 | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote in... |
| CVE-2020-29165 | CRITICAL | 9.8 | 1.7% | Feb 3, 2021 | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotel... |
| CVE-2020-29164 | MEDIUM | 6.1 | 5.4% | Feb 3, 2021 | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS). |
| CVE-2020-29163 | HIGH | 8.8 | 1.1% | Feb 3, 2021 | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection. |
| CVE-2020-28144 | CRITICAL | 9.8 | 2.1% | Feb 3, 2021 | Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 ... |
| CVE-2020-35152 | HIGH | 7.8 | 0.3% | Feb 3, 2021 | Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process run... |
| CVE-2020-8672 | HIGH | 7.8 | 0.3% | Feb 2, 2021 | Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series ... |
| CVE-2020-24490 | MEDIUM | 6.5 | 2.2% | Feb 2, 2021 | Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adja... |
| CVE-2020-8734 | MEDIUM | 6.7 | 0.3% | Feb 2, 2021 | Improper input validation in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privilege... |
| CVE-2020-4081 | MEDIUM | 6.1 | 0.6% | Feb 2, 2021 | In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS). |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now