2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8959 | HIGH | 7.8 | 0.4% | Feb 19, 2020 | Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking. |
| CVE-2020-4204 | HIGH | 7.8 | 0.6% | Feb 19, 2020 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buf... |
| CVE-2020-4135 | HIGH | 7.5 | 2.9% | Feb 19, 2020 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthe... |
| CVE-2020-9270 | HIGH | 8.8 | 0.5% | Feb 18, 2020 | ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php. |
| CVE-2020-9269 | HIGH | 7.2 | 2.4% | Feb 18, 2020 | SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as... |
| CVE-2020-9268 | HIGH | 7.5 | 1.4% | Feb 18, 2020 | SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_creat... |
| CVE-2020-9265 | HIGH | 8.2 | 1.5% | Feb 18, 2020 | phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demon... |
| CVE-2020-6844 | HIGH | 8.8 | 0.7% | Feb 18, 2020 | In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts... |
| CVE-2020-5530 | HIGH | 8.8 | 0.8% | Feb 18, 2020 | Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers ... |
| CVE-2020-8011 | HIGH | 7.5 | 2.2% | Feb 18, 2020 | CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference ... |
| CVE-2020-1812 | HIGH | 7.8 | 0.6% | Feb 18, 2020 | HUAWEI P30 smartphones with versions earlier than 10.0.0.173(C00E73R1P11) have an improper authentication vulnerability.... |
| CVE-2020-1790 | HIGH | 8.8 | 1.1% | Feb 18, 2020 | GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command usin... |
| CVE-2020-1816 | HIGH | 7.5 | 0.9% | Feb 18, 2020 | Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001... |
| CVE-2020-1815 | HIGH | 7.5 | 0.7% | Feb 18, 2020 | Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001... |
| CVE-2020-1811 | HIGH | 8.8 | 1.1% | Feb 18, 2020 | GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote a... |
| CVE-2020-1856 | HIGH | 7.5 | 0.8% | Feb 17, 2020 | Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C6... |
| CVE-2020-1841 | HIGH | 7.5 | 1.0% | Feb 17, 2020 | Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R00... |
| CVE-2020-1829 | HIGH | 7.5 | 0.7% | Feb 17, 2020 | Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200,... |
| CVE-2020-1827 | HIGH | 7.5 | 0.7% | Feb 17, 2020 | Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 version... |
| CVE-2020-1858 | HIGH | 7.5 | 0.8% | Feb 17, 2020 | Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R... |
| CVE-2020-1828 | HIGH | 7.5 | 0.7% | Feb 17, 2020 | Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500... |
| CVE-2020-7597 | HIGH | 8.8 | 2.9% | Feb 17, 2020 | codecov-node npm module before 3.6.5 allows remote attackers to execute arbitrary commands.The value provided as part of... |
| CVE-2020-9043 | HIGH | 8.8 | 8.2% | Feb 17, 2020 | The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key. |
| CVE-2020-1704 | HIGH | 7.8 | 0.3% | Feb 17, 2020 | An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maist... |
| CVE-2020-8795 | HIGH | 7.5 | 1.2% | Feb 17, 2020 | In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unau... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now