2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25194 | HIGH | 8.8 | 1.0% | Dec 23, 2020 | The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, whi... |
| CVE-2020-25192 | MEDIUM | 5.3 | 0.9% | Dec 23, 2020 | The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be dis... |
| CVE-2020-25190 | CRITICAL | 9.8 | 0.7% | Dec 23, 2020 | The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials o... |
| CVE-2020-25153 | HIGH | 7.5 | 1.2% | Dec 23, 2020 | The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong... |
| CVE-2020-35658 | MEDIUM | 5.3 | 0.5% | Dec 23, 2020 | SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted. |
| CVE-2020-35657 | HIGH | 7.2 | 2.4% | Dec 23, 2020 | Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of UploadTheme t... |
| CVE-2020-35656 | HIGH | 7.2 | 2.4% | Dec 23, 2020 | Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of admin.php?req... |
| CVE-2020-28641 | HIGH | 7.1 | 0.8% | Dec 22, 2020 | In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the loca... |
| CVE-2020-29583 | CRITICAL | 9.8 | 90.0% | Dec 22, 2020 | Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The p... |
| CVE-2020-27338 | HIGH | 7.1 | 0.8% | Dec 22, 2020 | An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows a... |
| CVE-2020-27337 | HIGH | 7.3 | 1.5% | Dec 22, 2020 | An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the IPv6 component allows an unauthe... |
| CVE-2020-27336 | MEDIUM | 5.3 | 1.7% | Dec 22, 2020 | An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a p... |
| CVE-2020-25066 | CRITICAL | 9.8 | 3.3% | Dec 22, 2020 | A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denia... |
| CVE-2020-24683 | CRITICAL | 9.8 | 1.4% | Dec 22, 2020 | The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which reli... |
| CVE-2020-24680 | HIGH | 7 | 0.3% | Dec 22, 2020 | In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stor... |
| CVE-2020-24679 | CRITICAL | 9.8 | 1.7% | Dec 22, 2020 | A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this fla... |
| CVE-2020-24678 | HIGH | 8.8 | 1.5% | Dec 22, 2020 | An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations ... |
| CVE-2020-24677 | HIGH | 8.8 | 1.3% | Dec 22, 2020 | Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privile... |
| CVE-2020-24676 | HIGH | 7.8 | 0.4% | Dec 22, 2020 | In Symphony Plus Operations and Symphony Plus Historian, some services can be vulnerable to privilege escalation attacks... |
| CVE-2020-24675 | CRITICAL | 9.8 | 1.2% | Dec 22, 2020 | In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations Histo... |
| CVE-2020-24674 | HIGH | 8.8 | 2.9% | Dec 22, 2020 | In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected. Authenticated bu... |
| CVE-2020-24673 | CRITICAL | 9.8 | 1.0% | Dec 22, 2020 | In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify ... |
| CVE-2020-14874 | MEDIUM | 4.7 | 0.8% | Dec 22, 2020 | Vulnerability in the Oracle Cloud Infrastructure Identity and Access Management product of Oracle Cloud Services. Easily... |
| CVE-2020-14270 | MEDIUM | 5.3 | 0.9% | Dec 22, 2020 | HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handli... |
| CVE-2020-35609 | MEDIUM | 5.5 | 1.3% | Dec 22, 2020 | A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now