2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26297 | MEDIUM | 6.1 | 1.3% | Jan 4, 2021 | mdBook is a utility to create modern online books from Markdown files and is written in Rust. In mdBook before version 0... |
| CVE-2020-26294 | MEDIUM | 5.3 | 1.8% | Jan 4, 2021 | Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler ... |
| CVE-2020-26293 | MEDIUM | 6.1 | 1.0% | Jan 4, 2021 | HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. ... |
| CVE-2020-36157 | CRITICAL | 9.8 | 3.0% | Jan 4, 2021 | An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalat... |
| CVE-2020-36156 | HIGH | 8.8 | 2.0% | Jan 4, 2021 | An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalatio... |
| CVE-2020-36155 | CRITICAL | 9.8 | 9.0% | Jan 4, 2021 | An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalat... |
| CVE-2020-35219 | CRITICAL | 9.8 | 1.7% | Jan 4, 2021 | The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin passw... |
| CVE-2020-26292 | CRITICAL | 9.8 | 0.9% | Jan 4, 2021 | Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains poten... |
| CVE-2020-36154 | HIGH | 7.8 | 0.4% | Jan 4, 2021 | The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMD... |
| CVE-2020-25275 | HIGH | 7.5 | 4.7% | Jan 4, 2021 | Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafte... |
| CVE-2020-24386 | MEDIUM | 6.8 | 2.8% | Jan 4, 2021 | An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernatio... |
| CVE-2020-17537 | — | — | — | Jan 4, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-17536 | — | — | — | Jan 4, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-17535 | — | — | — | Jan 4, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-36112 | CRITICAL | 9.8 | 17.2% | Jan 4, 2021 | CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pub... |
| CVE-2020-35507 | MEDIUM | 5.5 | 1.3% | Jan 4, 2021 | There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an a... |
| CVE-2020-35496 | MEDIUM | 5.5 | 1.2% | Jan 4, 2021 | There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to sub... |
| CVE-2020-35495 | MEDIUM | 5.5 | 1.2% | Jan 4, 2021 | There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the obj... |
| CVE-2020-35494 | MEDIUM | 6.1 | 1.1% | Jan 4, 2021 | There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed ... |
| CVE-2020-35493 | MEDIUM | 5.5 | 1.1% | Jan 4, 2021 | A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump cou... |
| CVE-2020-22550 | HIGH | 7.5 | 2.2% | Jan 4, 2021 | Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to do... |
| CVE-2020-4942 | HIGH | 8.8 | 0.5% | Jan 4, 2021 | IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an at... |
| CVE-2020-4928 | MEDIUM | 6.7 | 0.4% | Jan 4, 2021 | IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By intercepting the request ... |
| CVE-2020-4919 | LOW | 3.8 | 0.6% | Jan 4, 2021 | IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to imperson... |
| CVE-2020-4918 | MEDIUM | 4.4 | 0.3% | Jan 4, 2021 | IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now