2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28407 | HIGH | 7.1 | 0.3% | Nov 3, 2023 | In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink at... |
| CVE-2020-36767 | HIGH | 7.5 | 0.4% | Oct 30, 2023 | tinyfiledialogs (aka tiny file dialogs) before 3.8.0 allows shell metacharacters in titles, messages, and other input da... |
| CVE-2020-25870 | — | — | — | Oct 30, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-17477 | MEDIUM | 6.5 | 0.4% | Oct 26, 2023 | Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote teachers, staff, and s... |
| CVE-2020-36759 | MEDIUM | 4.3 | 0.4% | Oct 20, 2023 | The Woody code snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includin... |
| CVE-2020-36758 | MEDIUM | 4.3 | 0.4% | Oct 20, 2023 | The RSS Aggregator by Feedzy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inc... |
| CVE-2020-36755 | MEDIUM | 4.3 | 0.4% | Oct 20, 2023 | The Customizr theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. T... |
| CVE-2020-36754 | MEDIUM | 4.3 | 0.4% | Oct 20, 2023 | The Paid Memberships Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includ... |
| CVE-2020-36753 | MEDIUM | 4.3 | 0.4% | Oct 20, 2023 | The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3. This... |
| CVE-2020-36751 | MEDIUM | 4.3 | 0.4% | Oct 20, 2023 | The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.... |
| CVE-2020-36714 | HIGH | 8.1 | 0.4% | Oct 20, 2023 | The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_admin... |
| CVE-2020-36706 | CRITICAL | 9.8 | 1.8% | Oct 20, 2023 | The Simple:Press – WordPress Forum Plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type... |
| CVE-2020-36698 | HIGH | 8.8 | 1.0% | Oct 20, 2023 | The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized user interaction in versions... |
| CVE-2020-27636 | CRITICAL | 9.1 | 0.9% | Oct 10, 2023 | In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random. |
| CVE-2020-27635 | CRITICAL | 9.1 | 0.9% | Oct 10, 2023 | In PicoTCP 1.7.0, TCP ISNs are improperly random. |
| CVE-2020-27634 | CRITICAL | 9.1 | 1.7% | Oct 10, 2023 | In Contiki 4.5, TCP ISNs are improperly random. |
| CVE-2020-27633 | CRITICAL | 9.1 | 0.9% | Oct 10, 2023 | In FNET 4.6.3, TCP ISNs are improperly random. |
| CVE-2020-27631 | CRITICAL | 9.8 | 1.1% | Oct 10, 2023 | In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random. |
| CVE-2020-27630 | CRITICAL | 9.8 | 1.1% | Oct 10, 2023 | In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random. |
| CVE-2020-27213 | HIGH | 7.5 | 1.0% | Oct 10, 2023 | An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers (ISNs) for TCP connecti... |
| CVE-2020-18336 | HIGH | 7.4 | 0.6% | Oct 10, 2023 | Cross Site Scripting (XSS) vulnerability found in Typora v.0.9.65 allows a remote attacker to obtain sensitive informati... |
| CVE-2020-24089 | MEDIUM | 5.5 | 0.3% | Sep 20, 2023 | An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a ... |
| CVE-2020-36766 | LOW | 3.3 | 0.2% | Sep 18, 2023 | An issue was discovered in the Linux kernel before 5.8.6. drivers/media/cec/core/cec-api.c leaks one byte of kernel memo... |
| CVE-2020-19559 | CRITICAL | 9.8 | 1.2% | Sep 11, 2023 | An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted pay... |
| CVE-2020-19323 | HIGH | 7.5 | 1.0% | Sep 11, 2023 | An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now