2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-26919CRITICAL9.8NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.
CVE-2020-26918MEDIUM4.8Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 be...
CVE-2020-26917MEDIUM4.8Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 be...
CVE-2020-26916MEDIUM6.3Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.3...
CVE-2020-26915MEDIUM4.8Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b...
CVE-2020-26914HIGH7.1Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.38,...
CVE-2020-26913MEDIUM6.8Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor...
CVE-2020-26912HIGH8.8Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before ...
CVE-2020-26911HIGH8.8Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6200 before 1.1.00.3...
CVE-2020-26910MEDIUM6.8Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.10, ...
CVE-2020-26909HIGH8.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0....
CVE-2020-26908CRITICAL9.8Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.7...
CVE-2020-26907HIGH8.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2...
CVE-2020-26906HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26905HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26904HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26903HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26902HIGH8.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2...
CVE-2020-26901MEDIUM6.5Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK752 before 3.2.15.25, RBR75...
CVE-2020-26900HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26899MEDIUM6.5Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.10, RBK752 ...
CVE-2020-26898HIGH8.8NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings.
CVE-2020-26897HIGH8.8Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RB...
CVE-2020-26522HIGH8.8A cross-site request forgery (CSRF) vulnerability in mod/user/act_user.php in Garfield Petshop through 2020-10-01 allows...
CVE-2020-26162MEDIUM6.1Xerox WorkCentre EC7836 before 073.050.059.25300 and EC7856 before 073.020.059.25300 devices allow XSS via Description p...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now