2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5635 | HIGH | 8.8 | 1.0% | Dec 14, 2020 | Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker on the adjacent network to send a specially craft... |
| CVE-2020-35235 | HIGH | 8.8 | 18.0% | Dec 14, 2020 | vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder cod... |
| CVE-2020-35234 | HIGH | 7.5 | 63.4% | Dec 14, 2020 | The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in De... |
| CVE-2020-9001 | — | — | — | Dec 14, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-8999 | — | — | — | Dec 14, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-29669 | HIGH | 8.8 | 4.9% | Dec 14, 2020 | In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This pr... |
| CVE-2020-35208 | MEDIUM | 5.7 | 0.5% | Dec 12, 2020 | An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. T... |
| CVE-2020-35207 | MEDIUM | 5.7 | 0.5% | Dec 12, 2020 | An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. T... |
| CVE-2020-35202 | MEDIUM | 5.4 | 0.7% | Dec 12, 2020 | Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS. |
| CVE-2020-35201 | MEDIUM | 5.4 | 0.7% | Dec 12, 2020 | Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS. |
| CVE-2020-35200 | MEDIUM | 6.1 | 0.9% | Dec 12, 2020 | Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS. |
| CVE-2020-35199 | MEDIUM | 5.4 | 0.6% | Dec 12, 2020 | Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS. |
| CVE-2020-35176 | MEDIUM | 5.3 | 1.8% | Dec 12, 2020 | In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even... |
| CVE-2020-29654 | HIGH | 7.8 | 0.4% | Dec 12, 2020 | Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the SYSTEM account. |
| CVE-2020-29563 | CRITICAL | 9.8 | 2.9% | Dec 12, 2020 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vuln... |
| CVE-2020-35175 | MEDIUM | 5.3 | 0.9% | Dec 11, 2020 | Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API. |
| CVE-2020-25112 | CRITICAL | 9.8 | 26.8% | Dec 11, 2020 | An issue was discovered in the IPv6 stack in Contiki through 3.0. There are inconsistent checks for IPv6 header extensio... |
| CVE-2020-25111 | CRITICAL | 9.8 | 20.1% | Dec 11, 2020 | An issue was discovered in the IPv6 stack in Contiki through 3.0. There is an insufficient check for the IPv6 header len... |
| CVE-2020-25110 | CRITICAL | 9.8 | 52.3% | Dec 11, 2020 | An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS q... |
| CVE-2020-25109 | CRITICAL | 9.8 | 52.3% | Dec 11, 2020 | An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The number of DNS queries/responses (set in... |
| CVE-2020-25108 | CRITICAL | 9.8 | 52.3% | Dec 11, 2020 | An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The DNS response data length is not checked... |
| CVE-2020-25107 | CRITICAL | 9.8 | 52.3% | Dec 11, 2020 | An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. There is no check on whether a domain name ... |
| CVE-2020-24383 | CRITICAL | 9.1 | 4.8% | Dec 11, 2020 | An issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS queries doesn't check fo... |
| CVE-2020-24341 | CRITICAL | 9.1 | 4.9% | Dec 11, 2020 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in pico_tcp.c do... |
| CVE-2020-24340 | HIGH | 7.5 | 2.8% | Dec 11, 2020 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS responses in pico_mdns_hand... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now