2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6880 | CRITICAL | 9.8 | 1.2% | Dec 1, 2020 | A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending m... |
| CVE-2020-28993 | HIGH | 7.5 | 2.8% | Dec 1, 2020 | A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. ... |
| CVE-2020-28971 | CRITICAL | 9.8 | 3.8% | Dec 1, 2020 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vuln... |
| CVE-2020-28970 | CRITICAL | 9.8 | 3.9% | Dec 1, 2020 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vuln... |
| CVE-2020-28940 | CRITICAL | 9.8 | 3.9% | Dec 1, 2020 | On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an authentication bypass vulnerabi... |
| CVE-2020-7548 | CRITICAL | 9.8 | 1.4% | Dec 1, 2020 | A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (... |
| CVE-2020-7547 | HIGH | 8.8 | 1.3% | Dec 1, 2020 | A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA So... |
| CVE-2020-7546 | MEDIUM | 5.4 | 0.6% | Dec 1, 2020 | A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStru... |
| CVE-2020-7545 | HIGH | 7.2 | 2.0% | Dec 1, 2020 | A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Sof... |
| CVE-2020-7533 | CRITICAL | 9.8 | 2.3% | Dec 1, 2020 | CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver witho... |
| CVE-2020-26762 | CRITICAL | 9.8 | 2.2% | Dec 1, 2020 | A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthen... |
| CVE-2020-25181 | HIGH | 8.8 | 2.0% | Dec 1, 2020 | WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may... |
| CVE-2020-25177 | HIGH | 8.8 | 1.7% | Dec 1, 2020 | WECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has been identified that may a... |
| CVE-2020-4128 | MEDIUM | 5.3 | 0.9% | Dec 1, 2020 | HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker ... |
| CVE-2020-7335 | HIGH | 7.8 | 0.4% | Dec 1, 2020 | Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows loc... |
| CVE-2020-15257 | MEDIUM | 5.2 | 3.2% | Dec 1, 2020 | containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd b... |
| CVE-2020-9117 | HIGH | 7.8 | 0.2% | Dec 1, 2020 | HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5)... |
| CVE-2020-9114 | HIGH | 7.8 | 0.2% | Dec 1, 2020 | FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability. Due to improper p... |
| CVE-2020-9116 | HIGH | 7.2 | 1.0% | Dec 1, 2020 | Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker ... |
| CVE-2020-9115 | HIGH | 7.2 | 1.4% | Dec 1, 2020 | ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command... |
| CVE-2020-4129 | MEDIUM | 5.3 | 0.9% | Dec 1, 2020 | HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker coul... |
| CVE-2020-4126 | MEDIUM | 5.9 | 0.7% | Dec 1, 2020 | HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacke... |
| CVE-2020-14193 | MEDIUM | 5.4 | 0.8% | Nov 30, 2020 | Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache template... |
| CVE-2020-4127 | MEDIUM | 6.5 | 0.5% | Nov 30, 2020 | HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into ac... |
| CVE-2020-29441 | MEDIUM | 6.5 | 0.9% | Nov 30, 2020 | An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0. An unauthenticated attacker c... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now