2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4938 | HIGH | 8.8 | 0.4% | Jul 12, 2021 | IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malici... |
| CVE-2020-7872 | HIGH | 7.8 | 0.9% | Jul 12, 2021 | DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malform... |
| CVE-2020-21131 | HIGH | 7.2 | 1.2% | Jul 12, 2021 | SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language_web&a=doAddLanguage. |
| CVE-2020-20585 | HIGH | 7.5 | 1.8% | Jul 8, 2021 | A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database... |
| CVE-2020-20583 | HIGH | 7.5 | 1.3% | Jul 8, 2021 | A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive databas... |
| CVE-2020-20582 | HIGH | 7.5 | 1.1% | Jul 8, 2021 | A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to ac... |
| CVE-2020-28598 | HIGH | 7.8 | 1.3% | Jul 8, 2021 | An out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions() functionality of Prusa Research Pr... |
| CVE-2020-25868 | HIGH | 7.5 | 1.3% | Jul 7, 2021 | Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote att... |
| CVE-2020-24149 | HIGH | 7.5 | 1.7% | Jul 7, 2021 | Server-side request forgery (SSRF) in the Podcast Importer SecondLine (podcast-importer-secondline) plugin 1.1.4 for Wor... |
| CVE-2020-24146 | HIGH | 8.1 | 1.7% | Jul 7, 2021 | Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized us... |
| CVE-2020-24144 | HIGH | 8.6 | 2.0% | Jul 7, 2021 | Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker g... |
| CVE-2020-24143 | HIGH | 7.5 | 2.0% | Jul 7, 2021 | Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker... |
| CVE-2020-26763 | HIGH | 7.5 | 0.8% | Jul 5, 2021 | The Rocket.Chat desktop application 2.17.11 opens external links without user interaction. |
| CVE-2020-23219 | HIGH | 8.8 | 1.6% | Jul 1, 2021 | Monstra CMS 3.0.4 allows attackers to execute arbitrary code via a crafted payload entered into the "Snippet content" fi... |
| CVE-2020-4902 | HIGH | 8.8 | 1.0% | Jul 1, 2021 | IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could sen... |
| CVE-2020-27362 | HIGH | 8.8 | 1.3% | Jul 1, 2021 | An issue exists within the SSH console of Akkadian Provisioning Manager 4.50.02 which allows a low-level privileged user... |
| CVE-2020-27361 | HIGH | 7.5 | 6.7% | Jul 1, 2021 | An issue exists within Akkadian Provisioning Manager 4.50.02 which allows attackers to view sensitive information within... |
| CVE-2020-9158 | HIGH | 7.5 | 0.7% | Jul 1, 2021 | There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ... |
| CVE-2020-36407 | HIGH | 8.8 | 1.4% | Jul 1, 2021 | libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid. |
| CVE-2020-36406 | HIGH | 8.8 | 1.5% | Jul 1, 2021 | uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree (called from uWS::TopicTre... |
| CVE-2020-36405 | HIGH | 7.8 | 1.1% | Jul 1, 2021 | Keystone Engine 0.9.2 has a use-after-free in llvm_ks::X86Operand::getToken. |
| CVE-2020-36404 | HIGH | 7.8 | 1.1% | Jul 1, 2021 | Keystone Engine 0.9.2 has an invalid free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl. |
| CVE-2020-36403 | HIGH | 8.8 | 1.6% | Jul 1, 2021 | HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read). |
| CVE-2020-36402 | HIGH | 7.8 | 1.0% | Jul 1, 2021 | Solidity 0.7.5 has a stack-use-after-return issue in smtutil::CHCSmtLib2Interface::querySolver. NOTE: c39a5e2b7a3fabbf68... |
| CVE-2020-36401 | HIGH | 7.8 | 1.0% | Jul 1, 2021 | mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free). |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now