2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-29287 | CRITICAL | 9.8 | 2.7% | Dec 2, 2020 | An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter... |
| CVE-2020-29285 | CRITICAL | 9.8 | 1.3% | Dec 2, 2020 | SQL injection vulnerability was discovered in Point of Sales in PHP/PDO 1.0, which can be exploited via the id parameter... |
| CVE-2020-29284 | CRITICAL | 9.8 | 6.1% | Dec 2, 2020 | The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the t... |
| CVE-2020-29283 | CRITICAL | 9.8 | 1.3% | Dec 2, 2020 | An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parame... |
| CVE-2020-29282 | CRITICAL | 9.8 | 2.7% | Dec 2, 2020 | SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication. |
| CVE-2020-29280 | CRITICAL | 9.8 | 1.9% | Dec 2, 2020 | The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page. |
| CVE-2020-29279 | CRITICAL | 9.8 | 52.9% | Dec 2, 2020 | PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 7... |
| CVE-2020-26244 | MEDIUM | 6.8 | 0.8% | Dec 2, 2020 | Python oic is a Python OpenID Connect implementation. In Python oic before version 1.2.1, there are several related cryp... |
| CVE-2020-28206 | MEDIUM | 6.5 | 1.1% | Dec 2, 2020 | An issue was discovered in Bitrix24 Bitrix Framework (1c site management) 20.0. An "User enumeration and Improper Restri... |
| CVE-2020-13498 | MEDIUM | 5.5 | 0.9% | Dec 2, 2020 | An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially cra... |
| CVE-2020-13497 | MEDIUM | 5.5 | 1.2% | Dec 2, 2020 | An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially cra... |
| CVE-2020-13496 | MEDIUM | 6.5 | 1.7% | Dec 2, 2020 | An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially cra... |
| CVE-2020-13494 | MEDIUM | 5.5 | 1.2% | Dec 2, 2020 | A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files.... |
| CVE-2020-13493 | HIGH | 7.8 | 1.3% | Dec 2, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f... |
| CVE-2020-29389 | CRITICAL | 9.8 | 1.7% | Dec 2, 2020 | The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Li... |
| CVE-2020-29240 | MEDIUM | 4.8 | 1.7% | Dec 2, 2020 | Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS payload in the URL field of t... |
| CVE-2020-29239 | MEDIUM | 6.1 | 0.5% | Dec 2, 2020 | Online Birth Certificate System Project V 1.0 is affected by cross-site scripting (XSS). This vulnerability can result i... |
| CVE-2020-25266 | MEDIUM | 5.5 | 0.3% | Dec 2, 2020 | AppImage appimaged before 1.0.3 does not properly check whether a downloaded file is a valid appimage. For example, it w... |
| CVE-2020-25265 | MEDIUM | 6.5 | 1.9% | Dec 2, 2020 | AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by provid... |
| CVE-2020-13956 | MEDIUM | 5.3 | 9.0% | Dec 2, 2020 | Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request U... |
| CVE-2020-28273 | CRITICAL | 9.8 | 3.9% | Dec 2, 2020 | Prototype pollution vulnerability in 'set-in' versions 1.0.0 through 2.0.0 allows attacker to cause a denial of service ... |
| CVE-2020-28272 | CRITICAL | 9.8 | 3.3% | Dec 2, 2020 | Prototype pollution vulnerability in 'keyget' versions 1.0.0 through 2.2.0 allows attacker to cause a denial of service ... |
| CVE-2020-25638 | HIGH | 7.4 | 2.9% | Dec 2, 2020 | A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementatio... |
| CVE-2020-14369 | MEDIUM | 6.3 | 0.3% | Dec 2, 2020 | This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to ... |
| CVE-2020-12524 | HIGH | 7.5 | 1.1% | Dec 2, 2020 | Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now