2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7537 | HIGH | 7.5 | 1.4% | Dec 11, 2020 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Lega... |
| CVE-2020-7536 | HIGH | 7.5 | 1.1% | Dec 11, 2020 | A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versio... |
| CVE-2020-7535 | HIGH | 7.5 | 1.4% | Dec 11, 2020 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerabilit... |
| CVE-2020-28220 | MEDIUM | 6.8 | 1.0% | Dec 11, 2020 | A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 ... |
| CVE-2020-28219 | HIGH | 7.8 | 0.3% | Dec 11, 2020 | A CWE-522: Insufficiently Protected Credentials vulnerability exists in EcoStruxure Geo SCADA Expert 2019 (Original rele... |
| CVE-2020-28218 | MEDIUM | 6.5 | 1.1% | Dec 11, 2020 | A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 (firmware 2.7 and ... |
| CVE-2020-28217 | HIGH | 7.5 | 0.6% | Dec 11, 2020 | A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that woul... |
| CVE-2020-28216 | HIGH | 7.5 | 0.5% | Dec 11, 2020 | A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that woul... |
| CVE-2020-28215 | CRITICAL | 9.8 | 2.2% | Dec 11, 2020 | A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide ... |
| CVE-2020-28214 | MEDIUM | 5.5 | 0.7% | Dec 11, 2020 | A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versi... |
| CVE-2020-8908 | LOW | 3.3 | 1.0% | Dec 10, 2020 | A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine... |
| CVE-2020-4829 | HIGH | 7.8 | 0.3% | Dec 10, 2020 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the ksu user command to gain root ... |
| CVE-2020-35110 | — | — | — | Dec 10, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-35090 | — | — | — | Dec 10, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-35076 | — | — | — | Dec 10, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-29311 | CRITICAL | 9.8 | 6.3% | Dec 10, 2020 | Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside th... |
| CVE-2020-26270 | LOW | 3.3 | 0.2% | Dec 10, 2020 | In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer receives an input with zero-length... |
| CVE-2020-26269 | HIGH | 7.5 | 0.7% | Dec 10, 2020 | In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matching filesystem paths to globbing ... |
| CVE-2020-26268 | MEDIUM | 4.4 | 0.2% | Dec 10, 2020 | In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a constant tensor created from a memo... |
| CVE-2020-26267 | HIGH | 7.8 | 0.2% | Dec 10, 2020 | In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_form... |
| CVE-2020-26266 | MEDIUM | 5.3 | 0.2% | Dec 10, 2020 | In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code... |
| CVE-2020-26201 | CRITICAL | 9.8 | 2.4% | Dec 10, 2020 | Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. Th... |
| CVE-2020-25967 | HIGH | 8.8 | 1.3% | Dec 10, 2020 | The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vu... |
| CVE-2020-19527 | CRITICAL | 9.8 | 1.5% | Dec 10, 2020 | iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/inst... |
| CVE-2020-19142 | CRITICAL | 9.8 | 1.5% | Dec 10, 2020 | iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now