2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26062 | MEDIUM | 5.3 | 0.8% | Nov 18, 2024 | A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumer... |
| CVE-2020-25720 | HIGH | 7.5 | 0.5% | Nov 17, 2024 | A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory... |
| CVE-2020-10370 | HIGH | 8.8 | 0.5% | Nov 11, 2024 | Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not... |
| CVE-2020-10369 | MEDIUM | 5.5 | 0.4% | Nov 10, 2024 | Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow inference... |
| CVE-2020-10368 | LOW | 3.5 | 0.4% | Nov 10, 2024 | Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow memory re... |
| CVE-2020-10367 | MEDIUM | 5.5 | 0.4% | Nov 10, 2024 | Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow memory ac... |
| CVE-2020-8007 | CRITICAL | 9.8 | 1.8% | Nov 8, 2024 | The pwrstudio web application of EV Charger (in the server in Circontrol Raption through 5.6.2) is vulnerable to OS comm... |
| CVE-2020-11926 | HIGH | 7.5 | 0.6% | Nov 7, 2024 | An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the d... |
| CVE-2020-11921 | HIGH | 8.8 | 0.2% | Nov 7, 2024 | An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to... |
| CVE-2020-11919 | HIGH | 8 | 0.3% | Nov 7, 2024 | An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection. |
| CVE-2020-11918 | MEDIUM | 5.4 | 0.3% | Nov 7, 2024 | An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. When a backup file is created through the web interfa... |
| CVE-2020-11917 | MEDIUM | 4.3 | 0.6% | Nov 7, 2024 | An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. It uses a default SSID value, which makes it easier f... |
| CVE-2020-11916 | MEDIUM | 6.3 | 0.5% | Nov 7, 2024 | An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old... |
| CVE-2020-11859 | MEDIUM | 5.4 | 0.3% | Nov 6, 2024 | Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iMana... |
| CVE-2020-26311 | HIGH | 7.5 | 0.5% | Oct 26, 2024 | Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular express... |
| CVE-2020-26310 | HIGH | 8.7 | 0.4% | Oct 26, 2024 | Validate.js provides a declarative way of validating javascript objects. All versions as of 30 November 2020 contain one... |
| CVE-2020-26309 | HIGH | 8.7 | 0.4% | Oct 26, 2024 | Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more r... |
| CVE-2020-26308 | HIGH | 7.5 | 0.5% | Oct 26, 2024 | Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more r... |
| CVE-2020-26307 | HIGH | 8.7 | 0.4% | Oct 26, 2024 | HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or... |
| CVE-2020-26306 | HIGH | 8.7 | 0.4% | Oct 26, 2024 | Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Vers... |
| CVE-2020-26305 | HIGH | 7.5 | 0.5% | Oct 26, 2024 | CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that ... |
| CVE-2020-26304 | HIGH | 7.5 | 0.5% | Oct 26, 2024 | Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerabl... |
| CVE-2020-26303 | HIGH | 7.5 | 0.5% | Oct 26, 2024 | insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are... |
| CVE-2020-36841 | MEDIUM | 5.3 | 0.2% | Oct 16, 2024 | The WooCommerce Smart Coupons plugin for WordPress is vulnerable to authorization bypass due to a missing capability che... |
| CVE-2020-36842 | HIGH | 8.8 | 1.1% | Oct 16, 2024 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing c... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now