2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-20183 | HIGH | 7.5 | 1.0% | Dec 14, 2020 | Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier al... |
| CVE-2020-16104 | HIGH | 7.2 | 0.9% | Dec 14, 2020 | SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit... |
| CVE-2020-16103 | HIGH | 8.8 | 2.2% | Dec 14, 2020 | Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote ... |
| CVE-2020-16102 | HIGH | 8.2 | 1.0% | Dec 14, 2020 | Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to cr... |
| CVE-2020-28859 | MEDIUM | 6.1 | 0.8% | Dec 14, 2020 | OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple par... |
| CVE-2020-28858 | HIGH | 8.8 | 1.1% | Dec 14, 2020 | OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the applica... |
| CVE-2020-28857 | MEDIUM | 6.1 | 1.5% | Dec 14, 2020 | OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple pa... |
| CVE-2020-20136 | CRITICAL | 9.8 | 1.5% | Dec 14, 2020 | QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to inse... |
| CVE-2020-35338 | CRITICAL | 9.8 | 11.7% | Dec 14, 2020 | The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier... |
| CVE-2020-28856 | HIGH | 7.5 | 2.5% | Dec 14, 2020 | OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP ... |
| CVE-2020-25179 | CRITICAL | 9.8 | 1.4% | Dec 14, 2020 | GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the net... |
| CVE-2020-25175 | CRITICAL | 9.8 | 1.1% | Dec 14, 2020 | GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the net... |
| CVE-2020-15733 | MEDIUM | 6.5 | 0.6% | Dec 14, 2020 | An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to... |
| CVE-2020-35382 | HIGH | 7.2 | 1.0% | Dec 14, 2020 | SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user. |
| CVE-2020-35378 | CRITICAL | 9.8 | 2.0% | Dec 14, 2020 | SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands ... |
| CVE-2020-14268 | CRITICAL | 9.8 | 2.2% | Dec 14, 2020 | A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by a... |
| CVE-2020-14244 | CRITICAL | 9.8 | 3.0% | Dec 14, 2020 | A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by ... |
| CVE-2020-29227 | CRITICAL | 9.8 | 16.8% | Dec 14, 2020 | An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack... |
| CVE-2020-17513 | MEDIUM | 5.3 | 4.3% | Dec 14, 2020 | In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable... |
| CVE-2020-17511 | MEDIUM | 6.5 | 2.5% | Dec 14, 2020 | In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in ... |
| CVE-2020-35236 | MEDIUM | 5.3 | 1.2% | Dec 14, 2020 | The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deleti... |
| CVE-2020-5665 | HIGH | 7.4 | 1.0% | Dec 14, 2020 | Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and e... |
| CVE-2020-5639 | CRITICAL | 9.8 | 5.0% | Dec 14, 2020 | Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitra... |
| CVE-2020-5637 | MEDIUM | 6.8 | 0.4% | Dec 14, 2020 | Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows... |
| CVE-2020-5636 | MEDIUM | 6.8 | 0.7% | Dec 14, 2020 | Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to send a specia... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now