2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28288 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-28287 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-28286 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-28285 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-28284 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2020-28221 | CRITICAL | 9.8 | 1.8% | Jan 26, 2021 | A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (ver... |
| CVE-2020-27814 | HIGH | 7.8 | 2.0% | Jan 26, 2021 | A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw ... |
| CVE-2020-27735 | MEDIUM | 6.1 | 5.6% | Jan 26, 2021 | An XSS issue was discovered in Wing FTP 6.4.4. An arbitrary IFRAME element can be included in the help pages via a craft... |
| CVE-2020-27583 | CRITICAL | 9.8 | 3.7% | Jan 26, 2021 | IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unau... |
| CVE-2020-27542 | MEDIUM | 6.8 | 1.2% | Jan 26, 2021 | Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection. The camera reads configuration from QR code (inclu... |
| CVE-2020-27541 | HIGH | 7.5 | 1.1% | Jan 26, 2021 | Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast disc... |
| CVE-2020-27540 | CRITICAL | 9.8 | 0.8% | Jan 26, 2021 | Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1. The camera reads fir... |
| CVE-2020-27539 | CRITICAL | 9.8 | 1.3% | Jan 26, 2021 | Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1. AgentUpdater service has a self-writte... |
| CVE-2020-27298 | MEDIUM | 6.5 | 0.8% | Jan 26, 2021 | Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Ste... |
| CVE-2020-27288 | HIGH | 7.8 | 1.3% | Jan 26, 2021 | An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allow... |
| CVE-2020-27284 | HIGH | 7.8 | 1.2% | Jan 26, 2021 | TPEditor (v1.98 and prior) is vulnerable to two out-of-bounds write instances in the way it processes project files, all... |
| CVE-2020-27280 | HIGH | 7.8 | 1.3% | Jan 26, 2021 | A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an atta... |
| CVE-2020-27098 | MEDIUM | 5.5 | 0.1% | Jan 26, 2021 | In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissi... |
| CVE-2020-27097 | MEDIUM | 5.5 | 0.1% | Jan 26, 2021 | In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass. This could lead to l... |
| CVE-2020-26941 | MEDIUM | 5.5 | 0.3% | Jan 26, 2021 | A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwr... |
| CVE-2020-25737 | HIGH | 7.8 | 0.3% | Jan 26, 2021 | An elevation of privilege vulnerability exists in Hackolade versions prior 4.2.0 on Windows has an issue in specific dep... |
| CVE-2020-25173 | HIGH | 7.8 | 0.3% | Jan 26, 2021 | An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reol... |
| CVE-2020-25169 | HIGH | 7.5 | 1.0% | Jan 26, 2021 | The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink serv... |
| CVE-2020-24549 | HIGH | 8.8 | 2.6% | Jan 26, 2021 | openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server. |
| CVE-2020-24085 | MEDIUM | 6.1 | 0.8% | Jan 26, 2021 | A cross-site scripting (XSS) vulnerability exists in MISP v2.4.128 in app/Controller/UserSettingsController.php at SetHo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now