2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7565 | HIGH | 7.3 | 0.3% | Nov 19, 2020 | A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references, all versions) that could... |
| CVE-2020-7561 | CRITICAL | 9.8 | 3.0% | Nov 19, 2020 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and olde... |
| CVE-2020-7559 | HIGH | 7.5 | 1.9% | Nov 19, 2020 | A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator ... |
| CVE-2020-7558 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Re... |
| CVE-2020-7557 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Rem... |
| CVE-2020-7556 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Re... |
| CVE-2020-7555 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Re... |
| CVE-2020-7554 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definitio... |
| CVE-2020-7553 | HIGH | 7.8 | 2.3% | Nov 19, 2020 | A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Re... |
| CVE-2020-7552 | HIGH | 7.8 | 1.6% | Nov 19, 2020 | A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause ... |
| CVE-2020-7551 | HIGH | 7.8 | 1.6% | Nov 19, 2020 | A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause ... |
| CVE-2020-7550 | HIGH | 7.8 | 2.4% | Nov 19, 2020 | A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definitio... |
| CVE-2020-7544 | HIGH | 7.8 | 0.3% | Nov 19, 2020 | A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD)... |
| CVE-2020-7538 | HIGH | 7.5 | 1.3% | Nov 19, 2020 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Co... |
| CVE-2020-28954 | MEDIUM | 5.3 | 1.2% | Nov 19, 2020 | web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrate... |
| CVE-2020-28953 | MEDIUM | 4.3 | 0.7% | Nov 19, 2020 | In BigBlueButton before 2.2.29, a user can vote more than once in a single poll. |
| CVE-2020-28213 | HIGH | 8.8 | 1.1% | Nov 19, 2020 | A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert... |
| CVE-2020-28212 | CRITICAL | 9.8 | 2.6% | Nov 19, 2020 | A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxur... |
| CVE-2020-28211 | HIGH | 7.8 | 0.3% | Nov 19, 2020 | A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) ... |
| CVE-2020-28209 | HIGH | 7 | 0.3% | Nov 19, 2020 | A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installe... |
| CVE-2020-28350 | MEDIUM | 6.1 | 0.7% | Nov 19, 2020 | A Cross Site Scripting (XSS) vulnerability exists in OPAC in Sokrates SOWA SowaSQL through 5.6.1 via the sowacgi.php typ... |
| CVE-2020-28210 | MEDIUM | 6.1 | 0.9% | Nov 19, 2020 | A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoS... |
| CVE-2020-25989 | HIGH | 7.8 | 0.7% | Nov 19, 2020 | Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. Successful exp... |
| CVE-2020-28924 | HIGH | 7.5 | 1.3% | Nov 19, 2020 | An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generato... |
| CVE-2020-28951 | CRITICAL | 9.8 | 1.7% | Nov 19, 2020 | libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package nam... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now