2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-21667 | HIGH | 7.2 | 1.0% | Nov 13, 2020 | In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malic... |
| CVE-2020-9129 | MEDIUM | 6.7 | 0.2% | Nov 13, 2020 | HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to i... |
| CVE-2020-9127 | MEDIUM | 6.7 | 0.4% | Nov 13, 2020 | Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high... |
| CVE-2020-6156 | HIGH | 7.8 | 1.3% | Nov 13, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f... |
| CVE-2020-6155 | HIGH | 7.8 | 2.6% | Nov 13, 2020 | A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD ... |
| CVE-2020-6150 | HIGH | 7.8 | 1.3% | Nov 13, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompressi... |
| CVE-2020-6149 | HIGH | 7.8 | 1.3% | Nov 13, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f... |
| CVE-2020-6148 | HIGH | 7.8 | 1.3% | Nov 13, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f... |
| CVE-2020-6147 | HIGH | 7.8 | 1.4% | Nov 13, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f... |
| CVE-2020-4886 | LOW | 3.3 | 0.3% | Nov 13, 2020 | IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a... |
| CVE-2020-26825 | MEDIUM | 6.1 | 0.6% | Nov 13, 2020 | SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to use ... |
| CVE-2020-1847 | HIGH | 7.5 | 0.7% | Nov 13, 2020 | There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario o... |
| CVE-2020-7032 | MEDIUM | 6.5 | 3.5% | Nov 13, 2020 | An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary f... |
| CVE-2020-7033 | MEDIUM | 5.4 | 0.6% | Nov 13, 2020 | A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing ... |
| CVE-2020-27193 | MEDIUM | 6.1 | 2.0% | Nov 12, 2020 | A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run... |
| CVE-2020-24719 | CRITICAL | 9.8 | 23.3% | Nov 12, 2020 | Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by... |
| CVE-2020-17494 | MEDIUM | 5.3 | 0.8% | Nov 12, 2020 | Untangle Firewall NG before 16.0 uses MD5 for passwords. |
| CVE-2020-13877 | CRITICAL | 9.8 | 2.1% | Nov 12, 2020 | SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and... |
| CVE-2020-28415 | MEDIUM | 6.1 | 1.1% | Nov 12, 2020 | A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauth... |
| CVE-2020-28414 | MEDIUM | 6.1 | 1.1% | Nov 12, 2020 | A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauth... |
| CVE-2020-15783 | HIGH | 7.5 | 1.6% | Nov 12, 2020 | A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All ver... |
| CVE-2020-13774 | CRITICAL | 9.9 | 4.7% | Nov 12, 2020 | An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an aut... |
| CVE-2020-12927 | HIGH | 7.8 | 0.3% | Nov 12, 2020 | A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated use... |
| CVE-2020-12926 | MEDIUM | 6.4 | 0.2% | Nov 12, 2020 | The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happe... |
| CVE-2020-12912 | MEDIUM | 5.5 | 0.5% | Nov 12, 2020 | A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Run... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now