2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35131 | CRITICAL | 9.8 | 49.9% | Jan 8, 2021 | Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCrite... |
| CVE-2020-8584 | CRITICAL | 9.8 | 4.2% | Jan 8, 2021 | Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remot... |
| CVE-2020-5805 | HIGH | 8.8 | 0.9% | Jan 8, 2021 | In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml. OS-level users on ... |
| CVE-2020-5804 | HIGH | 8.1 | 1.7% | Jan 8, 2021 | Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of... |
| CVE-2020-27262 | MEDIUM | 5.4 | 0.7% | Jan 8, 2021 | Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 A stored cross-site scripting (XSS) vulnerability ex... |
| CVE-2020-27260 | MEDIUM | 5.3 | 0.4% | Jan 8, 2021 | Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affe... |
| CVE-2020-4667 | MEDIUM | 4.3 | 0.8% | Jan 8, 2021 | IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive informa... |
| CVE-2020-4666 | MEDIUM | 5.4 | 0.6% | Jan 8, 2021 | IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability all... |
| CVE-2020-4664 | MEDIUM | 5.4 | 0.6% | Jan 8, 2021 | IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability all... |
| CVE-2020-4663 | MEDIUM | 5.4 | 0.6% | Jan 8, 2021 | IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability all... |
| CVE-2020-4606 | MEDIUM | 4.4 | 0.3% | Jan 8, 2021 | IBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection (XXE) attack when processin... |
| CVE-2020-7794 | CRITICAL | 9.8 | 1.6% | Jan 8, 2021 | This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the ... |
| CVE-2020-7784 | CRITICAL | 9.8 | 1.4% | Jan 8, 2021 | This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of pac... |
| CVE-2020-28468 | CRITICAL | 9.8 | 4.2% | Jan 8, 2021 | This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulner... |
| CVE-2020-25950 | MEDIUM | 4.3 | 0.4% | Jan 8, 2021 | Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery (CSRF) attacks that can delete a contact... |
| CVE-2020-24577 | HIGH | 7.5 | 19.1% | Jan 8, 2021 | An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch applicatio... |
| CVE-2020-36049 | HIGH | 7.5 | 2.6% | Jan 8, 2021 | socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet beca... |
| CVE-2020-36048 | HIGH | 7.5 | 3.3% | Jan 8, 2021 | Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the lo... |
| CVE-2020-13452 | CRITICAL | 9.8 | 2.7% | Jan 7, 2021 | In Gotenberg through 6.2.1, insecure permissions for tini (writable by user gotenberg) potentially allow an attacker to ... |
| CVE-2020-13451 | CRITICAL | 9.8 | 3.0% | Jan 7, 2021 | An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to over... |
| CVE-2020-13450 | CRITICAL | 9.8 | 5.6% | Jan 7, 2021 | A directory traversal vulnerability in file upload function of Gotenberg through 6.2.1 allows an attacker to upload and ... |
| CVE-2020-13449 | HIGH | 7.5 | 4.9% | Jan 7, 2021 | A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any con... |
| CVE-2020-35745 | HIGH | 8.8 | 1.7% | Jan 7, 2021 | PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attac... |
| CVE-2020-17500 | CRITICAL | 9.8 | 3.9% | Jan 7, 2021 | Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of... |
| CVE-2020-6656 | HIGH | 7.8 | 2.7% | Jan 7, 2021 | Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vuln... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now