2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-29440 | MEDIUM | 4.6 | 0.2% | Nov 30, 2020 | Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob w... |
| CVE-2020-29439 | MEDIUM | 4.6 | 0.4% | Nov 30, 2020 | Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a ... |
| CVE-2020-29438 | MEDIUM | 6.5 | 0.4% | Nov 30, 2020 | Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This... |
| CVE-2020-16850 | HIGH | 7.5 | 2.1% | Nov 30, 2020 | Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by ... |
| CVE-2020-16849 | HIGH | 7.5 | 1.1% | Nov 30, 2020 | An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in... |
| CVE-2020-11867 | LOW | 3.3 | 0.5% | Nov 30, 2020 | Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary... |
| CVE-2020-29395 | MEDIUM | 6.1 | 11.7% | Nov 30, 2020 | The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field. |
| CVE-2020-27587 | MEDIUM | 6.7 | 0.4% | Nov 30, 2020 | Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access to files in the File Vau... |
| CVE-2020-27586 | MEDIUM | 5.9 | 0.7% | Nov 30, 2020 | Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text. |
| CVE-2020-27585 | MEDIUM | 4.4 | 0.3% | Nov 30, 2020 | Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings v... |
| CVE-2020-8351 | HIGH | 7.8 | 0.3% | Nov 30, 2020 | A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an a... |
| CVE-2020-6317 | LOW | 3.5 | 0.4% | Nov 30, 2020 | In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installation can acc... |
| CVE-2020-29394 | HIGH | 7.8 | 1.9% | Nov 30, 2020 | A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log ... |
| CVE-2020-17901 | MEDIUM | 6.5 | 0.4% | Nov 30, 2020 | Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user. |
| CVE-2020-29392 | MEDIUM | 4.6 | 0.4% | Nov 30, 2020 | The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a *#06#* backdoor password. An attacker with physical acce... |
| CVE-2020-29390 | CRITICAL | 9.8 | 36.7% | Nov 30, 2020 | Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that co... |
| CVE-2020-29364 | MEDIUM | 4.8 | 0.6% | Nov 30, 2020 | In NetArt News Lister 1.0.0, the news headlines vulnerable to stored xss attacks. Attackers can inject codes in news tit... |
| CVE-2020-28926 | CRITICAL | 9.8 | 14.3% | Nov 30, 2020 | ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to t... |
| CVE-2020-25537 | CRITICAL | 9.8 | 1.8% | Nov 30, 2020 | File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain serv... |
| CVE-2020-4900 | MEDIUM | 5.5 | 0.3% | Nov 30, 2020 | IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files that could be read by a ... |
| CVE-2020-4696 | MEDIUM | 4.3 | 0.7% | Nov 30, 2020 | IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which could allow an authenticated use... |
| CVE-2020-4627 | CRITICAL | 9 | 1.6% | Nov 30, 2020 | IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitr... |
| CVE-2020-4626 | MEDIUM | 4.3 | 1.0% | Nov 30, 2020 | IBM Cloud Pak for Security 1.3.0.1 (CP4S) could reveal sensitive information about the internal network to an authentica... |
| CVE-2020-4625 | MEDIUM | 5.3 | 1.5% | Nov 30, 2020 | IBM Cloud Pak for Security 1.3.0.1(CP4S) could allow a remote attacker to obtain sensitive information, caused by the fa... |
| CVE-2020-4624 | MEDIUM | 5.3 | 0.7% | Nov 30, 2020 | IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic algorithms during negotiation could al... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now