2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11610 | HIGH | 8.8 | 1.4% | Apr 7, 2020 | An issue was discovered in xdLocalStorage through 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js spec... |
| CVE-2020-11560 | HIGH | 7.8 | 1.0% | Apr 7, 2020 | NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file. |
| CVE-2020-11561 | HIGH | 8.8 | 2.2% | Apr 7, 2020 | In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged fun... |
| CVE-2020-7615 | HIGH | 7.8 | 1.1% | Apr 7, 2020 | fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand()', located within 'lib/rep.... |
| CVE-2020-7613 | HIGH | 8.1 | 2.1% | Apr 7, 2020 | clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_... |
| CVE-2020-5734 | HIGH | 7.5 | 25.1% | Apr 7, 2020 | Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by... |
| CVE-2020-11587 | HIGH | 7.5 | 1.2% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request a... |
| CVE-2020-11599 | HIGH | 7.5 | 1.1% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401. GetDistributedPOP3 allows attackers to obtain the us... |
| CVE-2020-11596 | HIGH | 7.5 | 1.8% | Apr 6, 2020 | A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can ma... |
| CVE-2020-11595 | HIGH | 7.5 | 1.2% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request a... |
| CVE-2020-11594 | HIGH | 7.5 | 1.2% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request t... |
| CVE-2020-11593 | HIGH | 7.5 | 1.0% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST req... |
| CVE-2020-11592 | HIGH | 7.5 | 1.2% | Apr 6, 2020 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request a... |
| CVE-2020-11589 | HIGH | 7.5 | 1.1% | Apr 6, 2020 | An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated a... |
| CVE-2020-11582 | HIGH | 8.8 | 0.8% | Apr 6, 2020 | An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed ... |
| CVE-2020-11581 | HIGH | 8.1 | 9.8% | Apr 6, 2020 | An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed ... |
| CVE-2020-5832 | HIGH | 7.8 | 0.4% | Apr 6, 2020 | Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalat... |
| CVE-2020-11544 | HIGH | 7.2 | 1.1% | Apr 6, 2020 | An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the ... |
| CVE-2020-11507 | HIGH | 7.8 | 0.8% | Apr 6, 2020 | An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM... |
| CVE-2020-8004 | HIGH | 7.5 | 3.0% | Apr 6, 2020 | STMicroelectronics STM32F1 devices have Incorrect Access Control. |
| CVE-2020-10267 | HIGH | 7.5 | 0.9% | Apr 6, 2020 | Universal Robots control box CB 3.1 across firmware versions (tested on 1.12.1, 1.12, 1.11 and 1.10) does not encrypt or... |
| CVE-2020-10266 | HIGH | 8.1 | 0.5% | Apr 6, 2020 | UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots. When inst... |
| CVE-2020-10264 | HIGH | 8.8 | 0.6% | Apr 6, 2020 | CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE (Real-Time Da... |
| CVE-2020-11528 | HIGH | 7.5 | 1.2% | Apr 4, 2020 | bit2spr 1992-06-07 has a stack-based buffer overflow (129-byte write) in conv_bitmap in bit2spr.c via a long line in a b... |
| CVE-2020-11527 | HIGH | 7.5 | 9.5% | Apr 4, 2020 | In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to r... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now