2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26224 | HIGH | 7.5 | 1.7% | Nov 16, 2020 | In PrestaShop before version 1.7.6.9 an attacker is able to list all the orders placed on the website without being logg... |
| CVE-2020-28693 | HIGH | 8.8 | 2.5% | Nov 16, 2020 | An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code t... |
| CVE-2020-27486 | CRITICAL | 9.9 | 1.9% | Nov 16, 2020 | Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ TVM. The attack vector is... |
| CVE-2020-27485 | CRITICAL | 9.9 | 1.6% | Nov 16, 2020 | Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector ... |
| CVE-2020-27484 | CRITICAL | 9.9 | 1.7% | Nov 16, 2020 | Garmin Forerunner 235 before 8.20 is affected by: Integer Overflow. The component is: ConnectIQ TVM. The attack vector i... |
| CVE-2020-27483 | CRITICAL | 9.9 | 2.1% | Nov 16, 2020 | Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector ... |
| CVE-2020-26217 | HIGH | 8.8 | 85.0% | Nov 16, 2020 | XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to ru... |
| CVE-2020-5424 | — | — | — | Nov 16, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-26510 | CRITICAL | 9.8 | 2.1% | Nov 16, 2020 | Airleader Master <= 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for depl... |
| CVE-2020-26509 | HIGH | 7.5 | 1.1% | Nov 16, 2020 | Airleader Master and Easy <= 6.21 devices have default credentials that can be used for a denial of service. |
| CVE-2020-26508 | CRITICAL | 9.8 | 1.1% | Nov 16, 2020 | The WebTools component on Canon Oce ColorWave 3500 5.1.1.0 devices allows attackers to retrieve stored SMB credentials v... |
| CVE-2020-28692 | HIGH | 7.2 | 1.6% | Nov 16, 2020 | In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for exec... |
| CVE-2020-23490 | HIGH | 7.5 | 2.6% | Nov 16, 2020 | There was a local file disclosure vulnerability in AVideo < 8.9 via the proxy streaming. An unauthenticated attacker can... |
| CVE-2020-23489 | HIGH | 8.8 | 2.3% | Nov 16, 2020 | The import.json.php file before 8.9 for Avideo is vulnerable to a File Deletion vulnerability. This allows the deletion ... |
| CVE-2020-4763 | MEDIUM | 4.3 | 1.0% | Nov 16, 2020 | IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on autho... |
| CVE-2020-4705 | MEDIUM | 4.8 | 0.5% | Nov 16, 2020 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-... |
| CVE-2020-4700 | HIGH | 8.8 | 1.2% | Nov 16, 2020 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenti... |
| CVE-2020-4692 | MEDIUM | 6.5 | 0.9% | Nov 16, 2020 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenti... |
| CVE-2020-4672 | MEDIUM | 5.4 | 0.6% | Nov 16, 2020 | IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2020-4671 | MEDIUM | 6.5 | 1.0% | Nov 16, 2020 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sens... |
| CVE-2020-4665 | MEDIUM | 4.3 | 1.0% | Nov 16, 2020 | IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not set the secure attribute on autho... |
| CVE-2020-4655 | HIGH | 8.8 | 1.3% | Nov 16, 2020 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL in... |
| CVE-2020-4647 | HIGH | 8.8 | 1.0% | Nov 16, 2020 | IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is vulnerable to SQL injection. A remote a... |
| CVE-2020-4566 | MEDIUM | 6.5 | 1.0% | Nov 16, 2020 | IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially high... |
| CVE-2020-4476 | HIGH | 7.5 | 1.5% | Nov 16, 2020 | IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain se... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now