2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-18646 | HIGH | 7.5 | 1.5% | Jun 22, 2021 | Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/publi... |
| CVE-2020-15732 | HIGH | 7.5 | 0.5% | Jun 22, 2021 | Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Securi... |
| CVE-2020-27511 | HIGH | 7.5 | 2.5% | Jun 21, 2021 | An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Re... |
| CVE-2020-22390 | HIGH | 8.8 | 1.6% | Jun 21, 2021 | Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrar... |
| CVE-2020-20474 | HIGH | 7.5 | 1.7% | Jun 21, 2021 | White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the default_task_edituser... |
| CVE-2020-20473 | HIGH | 7.5 | 1.7% | Jun 21, 2021 | White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, con... |
| CVE-2020-20471 | HIGH | 8.8 | 2.4% | Jun 21, 2021 | White Shark System (WSS) 1.3.2 has an unauthorized access vulnerability in default_user_edit.php, remote attackers can e... |
| CVE-2020-20469 | HIGH | 7.5 | 1.7% | Jun 21, 2021 | White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the log_edit.php files fa... |
| CVE-2020-36388 | HIGH | 8.8 | 1.5% | Jun 17, 2021 | In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHAR... |
| CVE-2020-25755 | HIGH | 8.8 | 3.1% | Jun 16, 2021 | An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices. The upgrade_start function in /insta... |
| CVE-2020-25754 | HIGH | 7.5 | 1.3% | Jun 16, 2021 | An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication tha... |
| CVE-2020-22201 | HIGH | 8.8 | 1.5% | Jun 16, 2021 | phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/produc... |
| CVE-2020-24939 | HIGH | 7.5 | 1.7% | Jun 16, 2021 | Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can va... |
| CVE-2020-20444 | HIGH | 7.2 | 1.1% | Jun 16, 2021 | Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infecte... |
| CVE-2020-12988 | HIGH | 7.5 | 1.0% | Jun 11, 2021 | A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker t... |
| CVE-2020-12986 | HIGH | 7.8 | 0.3% | Jun 11, 2021 | An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code exec... |
| CVE-2020-12985 | HIGH | 7.8 | 0.3% | Jun 11, 2021 | An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of pri... |
| CVE-2020-12983 | HIGH | 7.8 | 0.3% | Jun 11, 2021 | An out of bounds write vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privileges or d... |
| CVE-2020-12982 | HIGH | 7.8 | 0.3% | Jun 11, 2021 | An invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privile... |
| CVE-2020-12981 | HIGH | 7.8 | 0.3% | Jun 11, 2021 | An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the dr... |
| CVE-2020-12980 | HIGH | 7.8 | 0.3% | Jun 11, 2021 | An out of bounds write and read vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privil... |
| CVE-2020-7860 | HIGH | 7.8 | 0.9% | Jun 11, 2021 | UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specifi... |
| CVE-2020-13663 | HIGH | 8.8 | 0.7% | Jun 11, 2021 | Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-... |
| CVE-2020-23322 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context... |
| CVE-2020-23320 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in parser_parse_function_argume... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now