2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28929 | CRITICAL | 9.8 | 1.2% | Dec 16, 2020 | Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated at... |
| CVE-2020-26274 | HIGH | 8.8 | 2.7% | Dec 16, 2020 | In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fix... |
| CVE-2020-7781 | CRITICAL | 9.8 | 2.0% | Dec 16, 2020 | This affects the package connection-tester before 0.2.1. The injection point is located in line 15 in index.js. The foll... |
| CVE-2020-35133 | HIGH | 7.5 | 4.4% | Dec 16, 2020 | irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at i_view32... |
| CVE-2020-7837 | HIGH | 8.8 | 0.7% | Dec 16, 2020 | An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub_41EAF0 at MLReportD... |
| CVE-2020-5360 | HIGH | 7.5 | 2.2% | Dec 16, 2020 | Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthent... |
| CVE-2020-5359 | MEDIUM | 5.8 | 1.1% | Dec 16, 2020 | Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An una... |
| CVE-2020-26198 | MEDIUM | 6.1 | 1.0% | Dec 16, 2020 | Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in th... |
| CVE-2020-4008 | LOW | 3.6 | 0.2% | Dec 16, 2020 | The installer of the macOS Sensor for VMware Carbon Black Cloud (prior to 3.5.1) handles certain files in an insecure wa... |
| CVE-2020-29607 | HIGH | 7.2 | 33.4% | Dec 16, 2020 | A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access... |
| CVE-2020-25622 | HIGH | 8.8 | 0.9% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF. |
| CVE-2020-25621 | HIGH | 8.4 | 0.5% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security... |
| CVE-2020-25620 | HIGH | 7.8 | 0.4% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accou... |
| CVE-2020-14254 | HIGH | 7.5 | 0.6% | Dec 16, 2020 | TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enab... |
| CVE-2020-14248 | MEDIUM | 5.3 | 0.7% | Dec 16, 2020 | BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause ... |
| CVE-2020-29363 | HIGH | 7.5 | 3.5% | Dec 16, 2020 | An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC p... |
| CVE-2020-29362 | MEDIUM | 5.3 | 2.3% | Dec 16, 2020 | An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC ... |
| CVE-2020-29361 | HIGH | 7.5 | 3.4% | Dec 16, 2020 | An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array ... |
| CVE-2020-25619 | MEDIUM | 4.4 | 0.4% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channe... |
| CVE-2020-25618 | HIGH | 8.8 | 2.6% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because ... |
| CVE-2020-25617 | HIGH | 8.8 | 3.2% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Trave... |
| CVE-2020-28458 | HIGH | 7.3 | 3.7% | Dec 16, 2020 | All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.i... |
| CVE-2020-5683 | HIGH | 7.5 | 3.0% | Dec 16, 2020 | Directory traversal vulnerability in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1... |
| CVE-2020-5682 | HIGH | 7.5 | 2.0% | Dec 16, 2020 | Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series)... |
| CVE-2020-35476 | CRITICAL | 9.8 | 85.3% | Dec 16, 2020 | A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. Th... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now