2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-28407HIGH7.1In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink at...
CVE-2020-36767HIGH7.5tinyfiledialogs (aka tiny file dialogs) before 3.8.0 allows shell metacharacters in titles, messages, and other input da...
CVE-2020-25870——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2020-17477MEDIUM6.5Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote teachers, staff, and s...
CVE-2020-36759MEDIUM4.3The Woody code snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includin...
CVE-2020-36758MEDIUM4.3The RSS Aggregator by Feedzy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inc...
CVE-2020-36755MEDIUM4.3The Customizr theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. T...
CVE-2020-36754MEDIUM4.3The Paid Memberships Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includ...
CVE-2020-36753MEDIUM4.3The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3. This...
CVE-2020-36751MEDIUM4.3The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3....
CVE-2020-36714HIGH8.1The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_admin...
CVE-2020-36706CRITICAL9.8The Simple:Press – WordPress Forum Plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type...
CVE-2020-36698HIGH8.8The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized user interaction in versions...
CVE-2020-27636CRITICAL9.1In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random.
CVE-2020-27635CRITICAL9.1In PicoTCP 1.7.0, TCP ISNs are improperly random.
CVE-2020-27634CRITICAL9.1In Contiki 4.5, TCP ISNs are improperly random.
CVE-2020-27633CRITICAL9.1In FNET 4.6.3, TCP ISNs are improperly random.
CVE-2020-27631CRITICAL9.8In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random.
CVE-2020-27630CRITICAL9.8In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random.
CVE-2020-27213HIGH7.5An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers (ISNs) for TCP connecti...
CVE-2020-18336HIGH7.4Cross Site Scripting (XSS) vulnerability found in Typora v.0.9.65 allows a remote attacker to obtain sensitive informati...
CVE-2020-24089MEDIUM5.5An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a ...
CVE-2020-36766LOW3.3An issue was discovered in the Linux kernel before 5.8.6. drivers/media/cec/core/cec-api.c leaks one byte of kernel memo...
CVE-2020-19559CRITICAL9.8An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted pay...
CVE-2020-19323HIGH7.5An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now