2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-23330 | HIGH | 7.5 | 1.3% | Aug 17, 2021 | An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_Stz2Atom::GetSampleSize ... |
| CVE-2020-28594 | HIGH | 7.8 | 1.3% | Aug 17, 2021 | A use-after-free vulnerability exists in the _3MF_Importer::_handle_end_model() functionality of Prusa Research PrusaSli... |
| CVE-2020-13589 | HIGH | 8.8 | 1.0% | Aug 17, 2021 | An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management Ap... |
| CVE-2020-13588 | HIGH | 8.8 | 1.0% | Aug 17, 2021 | An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management Ap... |
| CVE-2020-29548 | HIGH | 8.1 | 1.1% | Aug 17, 2021 | An issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle attackers can pipeline com... |
| CVE-2020-18759 | HIGH | 7.5 | 0.8% | Aug 13, 2021 | An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100... |
| CVE-2020-18757 | HIGH | 7.5 | 1.3% | Aug 13, 2021 | An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to cause persistent denial of service (D... |
| CVE-2020-18756 | HIGH | 7.5 | 1.3% | Aug 13, 2021 | An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allow... |
| CVE-2020-18754 | HIGH | 7.5 | 1.3% | Aug 13, 2021 | An information disclosure vulnerability exists within Dut Computer Control Engineering Co.'s PLC MAC1100. |
| CVE-2020-22403 | HIGH | 8.8 | 0.6% | Aug 12, 2021 | Cross Site Request Forgery (CSRF) vulnerability in Express cart v1.1.16 allows attackers to add an administrator account... |
| CVE-2020-18462 | HIGH | 7.2 | 1.0% | Aug 12, 2021 | File Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file management office does not veri... |
| CVE-2020-18460 | HIGH | 8.8 | 0.4% | Aug 12, 2021 | Cross Site Request Forgery (CSRF) vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Ad... |
| CVE-2020-18458 | HIGH | 8 | 0.5% | Aug 12, 2021 | Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/... |
| CVE-2020-20981 | HIGH | 7.5 | 1.4% | Aug 12, 2021 | A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers to access sensitive dat... |
| CVE-2020-24576 | HIGH | 8.8 | 2.1% | Aug 12, 2021 | Netskope Client through 77 allows low-privileged users to elevate their privileges to NT AUTHORITY\SYSTEM. |
| CVE-2020-25564 | HIGH | 8.8 | 1.2% | Aug 11, 2021 | In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user... |
| CVE-2020-25561 | HIGH | 7.8 | 0.4% | Aug 11, 2021 | SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This credential is saved in Ser... |
| CVE-2020-21976 | HIGH | 8.8 | 1.8% | Aug 11, 2021 | An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers t... |
| CVE-2020-28589 | HIGH | 8.8 | 1.9% | Aug 11, 2021 | An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyo... |
| CVE-2020-21688 | HIGH | 8.8 | 1.7% | Aug 10, 2021 | A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary co... |
| CVE-2020-23150 | HIGH | 7.5 | 1.6% | Aug 9, 2021 | A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database informati... |
| CVE-2020-23149 | HIGH | 7.5 | 1.4% | Aug 9, 2021 | The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection... |
| CVE-2020-23148 | HIGH | 7.5 | 1.6% | Aug 9, 2021 | The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injectio... |
| CVE-2020-24742 | HIGH | 7.8 | 1.2% | Aug 9, 2021 | An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working direc... |
| CVE-2020-36465 | HIGH | 7.5 | 1.2% | Aug 8, 2021 | An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now