2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-29069 | MEDIUM | 5.5 | 0.3% | Nov 25, 2020 | _get_flag_ip_localdb in server/mhn/ui/utils.py in Modern Honey Network (MHN) through 2020-11-23 allows attackers to caus... |
| CVE-2020-26238 | HIGH | 8.1 | 4.2% | Nov 25, 2020 | Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In c... |
| CVE-2020-26237 | HIGH | 8.7 | 1.3% | Nov 24, 2020 | Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerabl... |
| CVE-2020-26235 | MEDIUM | 5.3 | 1.9% | Nov 24, 2020 | In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due to derefer... |
| CVE-2020-29063 | HIGH | 7.5 | 0.5% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-29062 | CRITICAL | 9.8 | 1.5% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-29061 | CRITICAL | 9.8 | 1.5% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-29060 | CRITICAL | 9.8 | 1.5% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-29059 | CRITICAL | 9.8 | 1.5% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-29058 | CRITICAL | 9.8 | 1.5% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-29057 | HIGH | 7.5 | 1.9% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-29056 | CRITICAL | 9.8 | 2.0% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-29055 | MEDIUM | 5.9 | 0.7% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-29054 | CRITICAL | 9.8 | 1.4% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-26232 | MEDIUM | 5.4 | 0.8% | Nov 24, 2020 | Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server c... |
| CVE-2020-29053 | MEDIUM | 6.1 | 0.7% | Nov 24, 2020 | HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter. |
| CVE-2020-28329 | CRITICAL | 9.8 | 1.5% | Nov 24, 2020 | Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the... |
| CVE-2020-25654 | HIGH | 7.2 | 2.0% | Nov 24, 2020 | An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group c... |
| CVE-2020-25159 | CRITICAL | 9.8 | 2.9% | Nov 24, 2020 | 499ES EtherNet/IP (ENIP) Adaptor Source Code is vulnerable to a stack-based buffer overflow, which may allow an attacker... |
| CVE-2020-28334 | CRITICAL | 9.8 | 4.7% | Nov 24, 2020 | Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s): 2.5.1.8, 2.5.0.25, 2.... |
| CVE-2020-28333 | CRITICAL | 9.8 | 3.2% | Nov 24, 2020 | Barco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1... |
| CVE-2020-28332 | CRITICAL | 9.8 | 1.1% | Nov 24, 2020 | Barco wePresent WiPG-1600W devices download code without an Integrity Check. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5... |
| CVE-2020-28330 | MEDIUM | 6.5 | 1.1% | Nov 24, 2020 | Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Version(s): 2.5.1.8. An attacker ... |
| CVE-2020-25640 | MEDIUM | 5.3 | 1.3% | Nov 24, 2020 | A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning lev... |
| CVE-2020-28994 | CRITICAL | 9.8 | 1.3% | Nov 24, 2020 | A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and belo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now