2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-29478 | HIGH | 7.5 | 1.2% | Jan 5, 2021 | CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allo... |
| CVE-2020-27845 | MEDIUM | 5.5 | 1.5% | Jan 5, 2021 | There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrust... |
| CVE-2020-27844 | HIGH | 7.8 | 1.3% | Jan 5, 2021 | A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide ... |
| CVE-2020-27843 | MEDIUM | 5.5 | 1.7% | Jan 5, 2021 | A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input... |
| CVE-2020-27842 | MEDIUM | 5.5 | 1.4% | Jan 5, 2021 | There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to ... |
| CVE-2020-27841 | MEDIUM | 5.5 | 1.4% | Jan 5, 2021 | There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide craft... |
| CVE-2020-13541 | HIGH | 8.8 | 0.6% | Jan 5, 2021 | An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2... |
| CVE-2020-13540 | HIGH | 7.8 | 0.5% | Jan 5, 2021 | An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V... |
| CVE-2020-13539 | HIGH | 7.8 | 0.6% | Jan 5, 2021 | An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V... |
| CVE-2020-7202 | MEDIUM | 5.3 | 1.5% | Jan 5, 2021 | A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out ... |
| CVE-2020-4899 | CRITICAL | 9.1 | 0.8% | Jan 5, 2021 | IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due t... |
| CVE-2020-4762 | HIGH | 8.8 | 1.3% | Jan 5, 2021 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow... |
| CVE-2020-4761 | MEDIUM | 5.3 | 1.3% | Jan 5, 2021 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow... |
| CVE-2020-35488 | HIGH | 7.5 | 7.6% | Jan 5, 2021 | The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of... |
| CVE-2020-26046 | MEDIUM | 5.4 | 0.7% | Jan 5, 2021 | FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicio... |
| CVE-2020-26045 | CRITICAL | 9.8 | 1.8% | Jan 5, 2021 | FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. Exploiting this issue could allo... |
| CVE-2020-17519 | HIGH | 7.5 | 97.9% | Jan 5, 2021 | A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file... |
| CVE-2020-17518 | HIGH | 7.5 | 52.3% | Jan 5, 2021 | Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the l... |
| CVE-2020-36158 | MEDIUM | 6.7 | 2.2% | Jan 5, 2021 | mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might ... |
| CVE-2020-5361 | HIGH | 7.6 | 0.4% | Jan 4, 2021 | Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist... |
| CVE-2020-29498 | MEDIUM | 6.1 | 1.1% | Jan 4, 2021 | Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attack... |
| CVE-2020-29497 | MEDIUM | 5.4 | 0.8% | Jan 4, 2021 | Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authentic... |
| CVE-2020-29496 | MEDIUM | 4.8 | 0.8% | Jan 4, 2021 | Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authentic... |
| CVE-2020-29492 | CRITICAL | 10 | 1.7% | Jan 4, 2021 | Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticate... |
| CVE-2020-29491 | HIGH | 8.6 | 1.8% | Jan 4, 2021 | Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticate... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now