2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9002 | HIGH | 7.5 | 1.0% | Sep 1, 2021 | An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changin... |
| CVE-2020-9000 | HIGH | 7.5 | 1.1% | Sep 1, 2021 | An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input... |
| CVE-2020-20490 | HIGH | 7.5 | 1.1% | Aug 31, 2021 | A heap buffer-overflow in the client_example1.c component of libiec_iccp_mod v1.5 leads to a denial of service (DOS). |
| CVE-2020-20486 | HIGH | 7.5 | 1.1% | Aug 31, 2021 | IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10x_Sta_Addr. |
| CVE-2020-19047 | HIGH | 8.8 | 0.7% | Aug 31, 2021 | Cross Site Request Forgey (CSRF) in iWebShop v5.3 allows remote atatckers to execute arbitrary code via malicious POST r... |
| CVE-2020-35635 | HIGH | 8.8 | 2.4% | Aug 30, 2021 | A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_... |
| CVE-2020-35634 | HIGH | 8.8 | 2.4% | Aug 30, 2021 | A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read v... |
| CVE-2020-35633 | HIGH | 8.8 | 2.3% | Aug 30, 2021 | A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read v... |
| CVE-2020-18121 | HIGH | 8.8 | 1.0% | Aug 30, 2021 | A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell. |
| CVE-2020-18116 | HIGH | 8.8 | 1.1% | Aug 27, 2021 | A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection. |
| CVE-2020-18477 | HIGH | 8.8 | 0.9% | Aug 26, 2021 | SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message con_content field. |
| CVE-2020-18476 | HIGH | 8.8 | 0.9% | Aug 26, 2021 | SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usd_image field. |
| CVE-2020-14160 | HIGH | 7.5 | 1.7% | Aug 26, 2021 | An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote a... |
| CVE-2020-19822 | HIGH | 7.2 | 2.8% | Aug 26, 2021 | A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbit... |
| CVE-2020-19821 | HIGH | 8.8 | 0.9% | Aug 26, 2021 | A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the ord... |
| CVE-2020-18917 | HIGH | 8.8 | 0.8% | Aug 24, 2021 | The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename ... |
| CVE-2020-18913 | HIGH | 7.5 | 1.3% | Aug 24, 2021 | EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via th... |
| CVE-2020-18771 | HIGH | 8.1 | 1.8% | Aug 23, 2021 | Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which ... |
| CVE-2020-18735 | HIGH | 7.5 | 1.9% | Aug 23, 2021 | A heap buffer overflow in /src/dds_stream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server t... |
| CVE-2020-18734 | HIGH | 7.5 | 1.9% | Aug 23, 2021 | A stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server t... |
| CVE-2020-18731 | HIGH | 7.5 | 1.4% | Aug 23, 2021 | A segmentation violation in the Iec104_Deal_FirmUpdate function of IEC104 v1.0 allows attackers to cause a denial of ser... |
| CVE-2020-18730 | HIGH | 7.5 | 1.4% | Aug 23, 2021 | A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a denial of service (DOS... |
| CVE-2020-36478 | HIGH | 7.5 | 1.1% | Aug 23, 2021 | An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parame... |
| CVE-2020-36476 | HIGH | 7.5 | 1.4% | Aug 23, 2021 | An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroiz... |
| CVE-2020-36475 | HIGH | 7.5 | 1.8% | Aug 23, 2021 | An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations perfor... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now