2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-29662 | MEDIUM | 5.3 | 0.7% | Feb 2, 2021 | In Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog’s registry API is exposed on an unauthenticated path. |
| CVE-2020-1910 | HIGH | 7.8 | 5.1% | Feb 2, 2021 | A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13... |
| CVE-2020-14255 | HIGH | 7.5 | 1.1% | Feb 2, 2021 | HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties v... |
| CVE-2020-14221 | MEDIUM | 4.9 | 0.8% | Feb 2, 2021 | HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users. |
| CVE-2020-7775 | CRITICAL | 9.8 | 1.3% | Feb 2, 2021 | This affects all versions of package freediskspace. The vulnerability arises out of improper neutralization of arguments... |
| CVE-2020-28498 | MEDIUM | 6.8 | 1.2% | Feb 2, 2021 | The package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec... |
| CVE-2020-15097 | CRITICAL | 9.1 | 2.1% | Feb 2, 2021 | loklak is an open-source server application which is able to collect messages from various sources, including twitter. T... |
| CVE-2020-4934 | MEDIUM | 4.3 | 1.8% | Feb 2, 2021 | IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send... |
| CVE-2020-18568 | CRITICAL | 9.8 | 14.6% | Feb 2, 2021 | The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause ... |
| CVE-2020-25506 | CRITICAL | 9.8 | 100.0% | Feb 2, 2021 | D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead ... |
| CVE-2020-8101 | HIGH | 8.8 | 1.2% | Feb 2, 2021 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of A... |
| CVE-2020-28495 | HIGH | 7.3 | 3.6% | Feb 2, 2021 | This affects the package total.js before 3.4.7. The set function can be used to set a value into the object according to... |
| CVE-2020-28494 | HIGH | 8.6 | 1.7% | Feb 2, 2021 | This affects the package total.js before 3.4.7. The issue occurs in the image.pipe and image.stream functions. The type ... |
| CVE-2020-24335 | HIGH | 7.5 | 3.0% | Feb 2, 2021 | An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, ... |
| CVE-2020-1896 | CRITICAL | 9.8 | 2.4% | Feb 2, 2021 | A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c7... |
| CVE-2020-25036 | HIGH | 8.8 | 2.0% | Feb 2, 2021 | UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, an... |
| CVE-2020-25035 | MEDIUM | 6.7 | 0.5% | Feb 2, 2021 | UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chroothole_client's PHP call, a ... |
| CVE-2020-25037 | HIGH | 8.2 | 0.5% | Feb 2, 2021 | UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted ... |
| CVE-2020-36231 | MEDIUM | 4.3 | 1.2% | Feb 2, 2021 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they sh... |
| CVE-2020-14192 | MEDIUM | 4.3 | 0.9% | Feb 2, 2021 | Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information Di... |
| CVE-2020-28493 | MEDIUM | 5.3 | 3.5% | Feb 1, 2021 | This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation... |
| CVE-2020-21180 | CRITICAL | 9.8 | 1.3% | Feb 1, 2021 | Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the na... |
| CVE-2020-21179 | CRITICAL | 9.8 | 1.3% | Feb 1, 2021 | Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the na... |
| CVE-2020-21176 | CRITICAL | 9.8 | 1.5% | Feb 1, 2021 | SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attacker... |
| CVE-2020-20296 | CRITICAL | 9.8 | 1.4% | Feb 1, 2021 | An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance para... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now