2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35783 | MEDIUM | 6.5 | 1.5% | Dec 30, 2020 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0... |
| CVE-2020-35782 | HIGH | 8.1 | 1.6% | Dec 30, 2020 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0... |
| CVE-2020-35781 | MEDIUM | 6.5 | 0.8% | Dec 30, 2020 | NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. |
| CVE-2020-35780 | MEDIUM | 6.5 | 0.8% | Dec 30, 2020 | NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. |
| CVE-2020-35779 | HIGH | 8.6 | 0.9% | Dec 30, 2020 | NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. |
| CVE-2020-35778 | HIGH | 8.8 | 0.4% | Dec 30, 2020 | Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36. |
| CVE-2020-35777 | HIGH | 8.4 | 0.8% | Dec 30, 2020 | NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection. |
| CVE-2020-10209 | HIGH | 8.1 | 2.7% | Dec 30, 2020 | Command Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications AK45x series, AK5xx ser... |
| CVE-2020-10208 | CRITICAL | 9.9 | 4.1% | Dec 30, 2020 | Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, A... |
| CVE-2020-10206 | MEDIUM | 4.4 | 0.3% | Dec 30, 2020 | Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx seri... |
| CVE-2020-10210 | CRITICAL | 9.8 | 1.5% | Dec 29, 2020 | Because of hard-coded SSH keys for the root user in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6... |
| CVE-2020-10207 | CRITICAL | 9.8 | 2.5% | Dec 29, 2020 | Use of Hard-coded Credentials in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6... |
| CVE-2020-10148 | CRITICAL | 9.8 | 92.0% | Dec 29, 2020 | The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API com... |
| CVE-2020-27645 | HIGH | 8.8 | 1.2% | Dec 29, 2020 | The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\... |
| CVE-2020-27644 | HIGH | 8.8 | 1.2% | Dec 29, 2020 | The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\... |
| CVE-2020-27643 | MEDIUM | 6.5 | 1.4% | Dec 29, 2020 | The %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote authenticated users and local u... |
| CVE-2020-16268 | HIGH | 8.8 | 1.3% | Dec 29, 2020 | The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevate... |
| CVE-2020-35735 | MEDIUM | 4.7 | 0.7% | Dec 29, 2020 | Vidyo 02-09-/D allows clickjacking via the portal/ URI. |
| CVE-2020-9223 | HIGH | 7.5 | 0.9% | Dec 29, 2020 | There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnorm... |
| CVE-2020-9208 | MEDIUM | 6.5 | 0.6% | Dec 29, 2020 | There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authenticat... |
| CVE-2020-9207 | HIGH | 7.8 | 0.6% | Dec 29, 2020 | There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not veri... |
| CVE-2020-9125 | MEDIUM | 6.7 | 0.2% | Dec 29, 2020 | There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2).... |
| CVE-2020-9124 | HIGH | 7.5 | 0.9% | Dec 29, 2020 | There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker... |
| CVE-2020-9094 | HIGH | 7.5 | 0.7% | Dec 29, 2020 | There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with ... |
| CVE-2020-9093 | MEDIUM | 5.5 | 0.5% | Dec 29, 2020 | There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specif... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now