2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12125 | CRITICAL | 9.8 | 3.6% | Oct 2, 2020 | A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.19040... |
| CVE-2020-12124 | CRITICAL | 9.8 | 75.8% | Oct 2, 2020 | A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.1... |
| CVE-2020-12123 | HIGH | 8.1 | 0.4% | Oct 2, 2020 | CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely ... |
| CVE-2020-26540 | HIGH | 7.5 | 0.7% | Oct 2, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mech... |
| CVE-2020-26539 | CRITICAL | 9.8 | 2.1% | Oct 2, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V... |
| CVE-2020-26538 | HIGH | 7.8 | 0.5% | Oct 2, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a ... |
| CVE-2020-26537 | CRITICAL | 9.8 | 1.1% | Oct 2, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outp... |
| CVE-2020-26536 | MEDIUM | 5.5 | 0.9% | Oct 2, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PD... |
| CVE-2020-26535 | CRITICAL | 9.8 | 1.7% | Oct 2, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storag... |
| CVE-2020-26534 | CRITICAL | 9.8 | 2.3% | Oct 2, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Fie... |
| CVE-2020-26524 | MEDIUM | 5.3 | 1.4% | Oct 2, 2020 | CodeLathe FileCloud before 20.2.0.11915 allows username enumeration. |
| CVE-2020-26523 | MEDIUM | 6.1 | 0.7% | Oct 2, 2020 | Froala Editor before 3.2.2 allows XSS via pasted content. |
| CVE-2020-26519 | MEDIUM | 5.5 | 1.0% | Oct 2, 2020 | Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a de... |
| CVE-2020-26518 | CRITICAL | 9.8 | 2.0% | Oct 2, 2020 | Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandora_console/... |
| CVE-2020-26511 | HIGH | 7.5 | 2.1% | Oct 2, 2020 | The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This lead... |
| CVE-2020-9491 | HIGH | 7.5 | 2.8% | Oct 1, 2020 | In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connectio... |
| CVE-2020-9487 | HIGH | 7.5 | 3.0% | Oct 1, 2020 | In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did no... |
| CVE-2020-9486 | HIGH | 7.5 | 3.4% | Oct 1, 2020 | In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive proper... |
| CVE-2020-5789 | MEDIUM | 6.5 | 1.3% | Oct 1, 2020 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to read the cont... |
| CVE-2020-5788 | MEDIUM | 6.5 | 1.2% | Oct 1, 2020 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitr... |
| CVE-2020-5787 | MEDIUM | 6.5 | 1.6% | Oct 1, 2020 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitr... |
| CVE-2020-5786 | HIGH | 8.8 | 8.8% | Oct 1, 2020 | Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a remote attacker to perform sensitive applica... |
| CVE-2020-5785 | MEDIUM | 6.1 | 0.7% | Oct 1, 2020 | Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an unauthenticated attacker to conduct r... |
| CVE-2020-5784 | MEDIUM | 6.5 | 0.7% | Oct 1, 2020 | Server-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user to cause the applicatio... |
| CVE-2020-5387 | MEDIUM | 4.4 | 0.3% | Oct 1, 2020 | Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker w... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now