2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36437 | HIGH | 8.1 | 0.8% | Aug 8, 2021 | An issue was discovered in the conqueue crate before 0.4.0 for Rust. There are unconditional implementations of Send and... |
| CVE-2020-36436 | HIGH | 8.1 | 0.8% | Aug 8, 2021 | An issue was discovered in the unicycle crate before 0.7.1 for Rust. PinSlab<T> and Unordered<T, S> do not have bounds o... |
| CVE-2020-36435 | HIGH | 8.1 | 0.8% | Aug 8, 2021 | An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bo... |
| CVE-2020-36433 | HIGH | 7.5 | 0.9% | Aug 8, 2021 | An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requi... |
| CVE-2020-28087 | HIGH | 7.5 | 1.6% | Aug 6, 2021 | A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sens... |
| CVE-2020-18694 | HIGH | 8.8 | 0.9% | Aug 6, 2021 | Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain pr... |
| CVE-2020-7863 | HIGH | 8.8 | 1.5% | Aug 5, 2021 | A vulnerability in File Transfer Solution of Raonwiz could allow arbitrary command execution as the result of viewing a ... |
| CVE-2020-29011 | HIGH | 8.8 | 1.0% | Aug 4, 2021 | Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 throu... |
| CVE-2020-19304 | HIGH | 7.5 | 1.9% | Aug 3, 2021 | An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory... |
| CVE-2020-19303 | HIGH | 7.8 | 1.3% | Aug 3, 2021 | An arbitrary file upload vulnerability in /fileupload.php of hdcms 5.7 allows attackers to execute arbitrary code via a ... |
| CVE-2020-26806 | HIGH | 8.8 | 6.0% | Jul 31, 2021 | admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in r... |
| CVE-2020-26565 | HIGH | 7.5 | 1.7% | Jul 31, 2021 | ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter. Thi... |
| CVE-2020-22761 | HIGH | 8.8 | 0.8% | Jul 30, 2021 | Cross Site Request Forgery (CSRF) vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php. |
| CVE-2020-20698 | HIGH | 7.2 | 1.9% | Jul 30, 2021 | A remote code execution (RCE) vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modificatio... |
| CVE-2020-18157 | HIGH | 8.8 | 0.7% | Jul 30, 2021 | Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php. |
| CVE-2020-16839 | HIGH | 7.5 | 1.2% | Jul 30, 2021 | On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch, the password can be chan... |
| CVE-2020-14999 | HIGH | 7.5 | 1.1% | Jul 30, 2021 | A logic bug in system monitoring driver of Acronis Agent after 12.5.21540 and before 12.5.23094 allowed to bypass Window... |
| CVE-2020-11511 | HIGH | 8.1 | 3.2% | Jul 30, 2021 | The LearnPress plugin before 3.2.6.9 for WordPress allows remote attackers to escalate the privileges of any user to LP ... |
| CVE-2020-10590 | HIGH | 7.5 | 1.3% | Jul 30, 2021 | Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Con... |
| CVE-2020-5353 | HIGH | 8.8 | 1.0% | Jul 29, 2021 | The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for N... |
| CVE-2020-5351 | HIGH | 7.5 | 1.1% | Jul 28, 2021 | Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that... |
| CVE-2020-26180 | HIGH | 8.8 | 0.6% | Jul 28, 2021 | Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an ... |
| CVE-2020-18430 | HIGH | 7.5 | 1.3% | Jul 26, 2021 | tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to... |
| CVE-2020-18428 | HIGH | 7.5 | 1.2% | Jul 26, 2021 | tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to... |
| CVE-2020-18173 | HIGH | 7.8 | 0.5% | Jul 26, 2021 | A DLL injection vulnerability in 1password.dll of 1Password 7.3.712 allows attackers to execute arbitrary code. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now