2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6572 | HIGH | 8.8 | 10.6% | Jan 14, 2021 | Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a... |
| CVE-2020-29495 | CRITICAL | 10 | 6.2% | Jan 14, 2021 | DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A ... |
| CVE-2020-29494 | HIGH | 8.7 | 1.7% | Jan 14, 2021 | Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could po... |
| CVE-2020-29493 | CRITICAL | 9.8 | 2.6% | Jan 14, 2021 | DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer. A remote u... |
| CVE-2020-16046 | MEDIUM | 6.1 | 0.8% | Jan 14, 2021 | Script injection in iOSWeb in Google Chrome on iOS prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary... |
| CVE-2020-16045 | CRITICAL | 9.6 | 1.0% | Jan 14, 2021 | Use after Free in Payments in Google Chrome on Android prior to 87.0.4280.66 allowed a remote attacker who had compromis... |
| CVE-2020-6777 | MEDIUM | 4.8 | 0.6% | Jan 14, 2021 | A vulnerability in the web-based management interface of Bosch PRAESIDEO until and including version 4.41 and Bosch PRAE... |
| CVE-2020-6776 | HIGH | 8.8 | 0.5% | Jan 14, 2021 | A vulnerability in the web-based management interface of Bosch PRAESIDEO until and including version 4.41 and Bosch PRAE... |
| CVE-2020-29587 | MEDIUM | 5.4 | 0.7% | Jan 14, 2021 | SimplCommerce 1.0.0-rc uses the Bootbox.js library, which allows creation of programmatic dialog boxes using Bootstrap m... |
| CVE-2020-29019 | MEDIUM | 5.3 | 2.1% | Jan 14, 2021 | A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow a remote,... |
| CVE-2020-29018 | HIGH | 8.8 | 2.0% | Jan 14, 2021 | A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the co... |
| CVE-2020-29017 | HIGH | 8.8 | 3.6% | Jan 14, 2021 | An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to ... |
| CVE-2020-29016 | CRITICAL | 9.8 | 3.3% | Jan 14, 2021 | A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauth... |
| CVE-2020-29015 | CRITICAL | 9.8 | 2.6% | Jan 14, 2021 | A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauth... |
| CVE-2020-27368 | MEDIUM | 5.5 | 0.5% | Jan 14, 2021 | Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /ic... |
| CVE-2020-26733 | MEDIUM | 5.4 | 0.7% | Jan 14, 2021 | Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 ... |
| CVE-2020-26732 | HIGH | 7.5 | 1.5% | Jan 14, 2021 | SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie ... |
| CVE-2020-28470 | MEDIUM | 6.1 | 0.8% | Jan 14, 2021 | This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify() funct... |
| CVE-2020-16119 | HIGH | 7.8 | 0.4% | Jan 14, 2021 | Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an a... |
| CVE-2020-27267 | CRITICAL | 9.1 | 4.9% | Jan 14, 2021 | KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-... |
| CVE-2020-27265 | CRITICAL | 9.8 | 10.1% | Jan 14, 2021 | KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC... |
| CVE-2020-27263 | CRITICAL | 9.1 | 4.9% | Jan 14, 2021 | KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC... |
| CVE-2020-9209 | MEDIUM | 6.7 | 0.2% | Jan 13, 2021 | There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located impro... |
| CVE-2020-1866 | MEDIUM | 6.5 | 0.4% | Jan 13, 2021 | There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended b... |
| CVE-2020-1865 | MEDIUM | 6.5 | 0.3% | Jan 13, 2021 | There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now