2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25228 | CRITICAL | 9.8 | 1.4% | Dec 14, 2020 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on ... |
| CVE-2020-20189 | CRITICAL | 9.8 | 1.1% | Dec 14, 2020 | SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php. |
| CVE-2020-15796 | HIGH | 7.5 | 1.6% | Dec 14, 2020 | A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500... |
| CVE-2020-14368 | HIGH | 7.1 | 0.5% | Dec 14, 2020 | A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. When configured with cook... |
| CVE-2020-8286 | HIGH | 7.5 | 4.6% | Dec 14, 2020 | curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verificatio... |
| CVE-2020-8285 | HIGH | 7.5 | 9.8% | Dec 14, 2020 | curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcar... |
| CVE-2020-8284 | LOW | 3.7 | 3.9% | Dec 14, 2020 | A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP add... |
| CVE-2020-8283 | HIGH | 8.8 | 2.6% | Dec 14, 2020 | An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SY... |
| CVE-2020-8282 | HIGH | 8.8 | 0.9% | Dec 14, 2020 | A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an a... |
| CVE-2020-8258 | HIGH | 7.5 | 1.3% | Dec 14, 2020 | Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-... |
| CVE-2020-8257 | CRITICAL | 9.8 | 1.6% | Dec 14, 2020 | Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-... |
| CVE-2020-8231 | HIGH | 7.5 | 3.8% | Dec 14, 2020 | Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data. |
| CVE-2020-8177 | HIGH | 7.8 | 1.3% | Dec 14, 2020 | curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead to... |
| CVE-2020-8169 | HIGH | 7.5 | 3.5% | Dec 14, 2020 | curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password ... |
| CVE-2020-29511 | MEDIUM | 5.6 | 1.9% | Dec 14, 2020 | The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes du... |
| CVE-2020-29510 | MEDIUM | 5.6 | 2.0% | Dec 14, 2020 | The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during ... |
| CVE-2020-29509 | MEDIUM | 5.6 | 2.1% | Dec 14, 2020 | The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes ... |
| CVE-2020-29304 | MEDIUM | 6.1 | 5.5% | Dec 14, 2020 | A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and p... |
| CVE-2020-29303 | MEDIUM | 6.1 | 1.9% | Dec 14, 2020 | A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote att... |
| CVE-2020-28861 | MEDIUM | 5.3 | 2.3% | Dec 14, 2020 | OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV ... |
| CVE-2020-28860 | HIGH | 8.8 | 2.2% | Dec 14, 2020 | OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating i... |
| CVE-2020-27252 | HIGH | 8.1 | 3.7% | Dec 14, 2020 | Medtronic MyCareLink Smart 25000 is vulnerable to a race condition in the MCL Smart Patient Reader software update sys... |
| CVE-2020-25187 | CRITICAL | 9.8 | 3.9% | Dec 14, 2020 | Medtronic MyCareLink Smart 25000 is vulnerable when an authenticated attacker runs a debug command, which can be sent... |
| CVE-2020-25183 | HIGH | 8.8 | 0.8% | Dec 14, 2020 | Medtronic MyCareLink Smart 25000 contains an authentication protocol vulnerability where the method used to authentica... |
| CVE-2020-20184 | CRITICAL | 9.8 | 2.7% | Dec 14, 2020 | GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now