2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3960 | HIGH | 8.4 | 0.3% | Sep 15, 2021 | VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and... |
| CVE-2020-35340 | HIGH | 7.5 | 1.1% | Sep 15, 2021 | A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from f... |
| CVE-2020-20672 | HIGH | 7.8 | 0.9% | Sep 13, 2021 | An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a cr... |
| CVE-2020-20671 | HIGH | 8.8 | 0.5% | Sep 13, 2021 | A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account. |
| CVE-2020-20670 | HIGH | 8.8 | 1.7% | Sep 13, 2021 | An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary co... |
| CVE-2020-27969 | HIGH | 7.3 | 0.5% | Sep 13, 2021 | Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing |
| CVE-2020-19280 | HIGH | 8.8 | 0.8% | Sep 9, 2021 | Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and perform sens... |
| CVE-2020-19263 | HIGH | 8.8 | 0.6% | Sep 9, 2021 | A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to adminis... |
| CVE-2020-7874 | HIGH | 8.8 | 0.6% | Sep 9, 2021 | Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows ... |
| CVE-2020-19137 | HIGH | 7.5 | 0.9% | Sep 8, 2021 | Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via... |
| CVE-2020-27942 | HIGH | 7.8 | 1.2% | Sep 8, 2021 | A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Se... |
| CVE-2020-11301 | HIGH | 7.5 | 11.1% | Sep 8, 2021 | Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosur... |
| CVE-2020-19769 | HIGH | 7.5 | 0.5% | Sep 7, 2021 | A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows attackers to steal tokens from... |
| CVE-2020-19768 | HIGH | 7.5 | 0.5% | Sep 7, 2021 | A lack of target address verification in the selfdestructs() function of ICOVO 1.0 allows attackers to steal tokens from... |
| CVE-2020-19767 | HIGH | 7.5 | 1.1% | Sep 7, 2021 | A lack of target address verification in the destroycontract() function of 0xRACER 1.0 allows attackers to steal tokens ... |
| CVE-2020-19766 | HIGH | 7.5 | 0.9% | Sep 7, 2021 | The time check operation of PepeAuctionSale 1.0 can be rendered ineffective by assigning a large number to the _duration... |
| CVE-2020-19765 | HIGH | 7.5 | 0.9% | Sep 7, 2021 | An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a re... |
| CVE-2020-19752 | HIGH | 7.5 | 1.6% | Sep 7, 2021 | The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference. |
| CVE-2020-19750 | HIGH | 7.5 | 1.1% | Sep 7, 2021 | An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read. |
| CVE-2020-7819 | HIGH | 7.5 | 1.4% | Sep 7, 2021 | A SQL-Injection vulnerability in the nTracker USB Enterprise(secure USB management solution) allows a remote unauthentic... |
| CVE-2020-19131 | HIGH | 7.5 | 2.3% | Sep 7, 2021 | Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the... |
| CVE-2020-7877 | HIGH | 8.8 | 0.8% | Sep 7, 2021 | A buffer overflow issue was discovered in ZOOK solution(remote administration tool) through processing 'ConnectMe' comma... |
| CVE-2020-13929 | HIGH | 7.5 | 3.0% | Sep 2, 2021 | Authentication bypass vulnerability in Apache Zeppelin allows an attacker to bypass Zeppelin authentication mechanism to... |
| CVE-2020-20341 | HIGH | 7.5 | 1.3% | Sep 1, 2021 | YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function. |
| CVE-2020-20340 | HIGH | 7.5 | 1.3% | Sep 1, 2021 | A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sens... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now