2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5136 | MEDIUM | 6.5 | 1.1% | Oct 12, 2020 | A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-... |
| CVE-2020-5135 | CRITICAL | 9.8 | 26.9% | Oct 12, 2020 | A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially exe... |
| CVE-2020-5134 | MEDIUM | 6.5 | 1.1% | Oct 12, 2020 | A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a fire... |
| CVE-2020-5133 | HIGH | 7.5 | 1.7% | Oct 12, 2020 | A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, w... |
| CVE-2020-14184 | MEDIUM | 5.4 | 0.9% | Oct 12, 2020 | Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Sit... |
| CVE-2020-26948 | CRITICAL | 9.8 | 87.2% | Oct 10, 2020 | Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter. |
| CVE-2020-26947 | HIGH | 7.8 | 0.4% | Oct 10, 2020 | monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH (with a preference ahead o... |
| CVE-2020-26945 | HIGH | 8.1 | 1.8% | Oct 10, 2020 | MyBatis before 3.5.6 mishandles deserialization of object streams. |
| CVE-2020-26935 | CRITICAL | 9.8 | 67.1% | Oct 10, 2020 | An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerabili... |
| CVE-2020-26934 | MEDIUM | 6.1 | 2.2% | Oct 10, 2020 | phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link. |
| CVE-2020-26932 | MEDIUM | 4.3 | 1.0% | Oct 10, 2020 | debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, whe... |
| CVE-2020-9105 | MEDIUM | 6.7 | 0.2% | Oct 9, 2020 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an insufficient input validation vulnerability. Due to t... |
| CVE-2020-13955 | MEDIUM | 5.9 | 2.1% | Oct 9, 2020 | HttpUtils#getURLConnection method disables explicitly hostname verification for HTTPS connections making clients vulnera... |
| CVE-2020-26931 | MEDIUM | 6.5 | 0.4% | Oct 9, 2020 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC7600... |
| CVE-2020-26930 | LOW | 3.8 | 0.5% | Oct 9, 2020 | NETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings. |
| CVE-2020-26929 | HIGH | 8 | 0.9% | Oct 9, 2020 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100 ... |
| CVE-2020-26928 | CRITICAL | 9.6 | 0.7% | Oct 9, 2020 | Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.... |
| CVE-2020-26927 | CRITICAL | 9.8 | 1.1% | Oct 9, 2020 | Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.7... |
| CVE-2020-26926 | CRITICAL | 9.6 | 0.5% | Oct 9, 2020 | Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.... |
| CVE-2020-26925 | LOW | 3.2 | 0.3% | Oct 9, 2020 | NETGEAR GS808E devices before 1.7.1.0 are affected by denial of service. |
| CVE-2020-26924 | MEDIUM | 6.5 | 0.6% | Oct 9, 2020 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC720 before 3.9.1.13 and WAC... |
| CVE-2020-26923 | MEDIUM | 4.8 | 0.5% | Oct 9, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v... |
| CVE-2020-26922 | MEDIUM | 6.7 | 0.4% | Oct 9, 2020 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24,... |
| CVE-2020-26921 | HIGH | 8.8 | 0.8% | Oct 9, 2020 | Certain NETGEAR devices are affected by authentication bypass. This affects GS110EMX before 1.0.1.7, GS810EMX before 1.7... |
| CVE-2020-26920 | HIGH | 8.8 | 1.2% | Oct 9, 2020 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now