2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25053 | CRITICAL | 9.8 | 0.7% | Aug 31, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. RKP allows arbitrary code... |
| CVE-2020-25052 | CRITICAL | 9.8 | 0.6% | Aug 31, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. H-Arx allows attackers to... |
| CVE-2020-25051 | HIGH | 7.5 | 0.4% | Aug 31, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can bypass Factory Reset P... |
| CVE-2020-25050 | HIGH | 7.5 | 0.4% | Aug 31, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The CMC service allows attackers to ... |
| CVE-2020-25049 | CRITICAL | 9.8 | 0.4% | Aug 31, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. StatusBarService has insufficient DE... |
| CVE-2020-25048 | MEDIUM | 4.6 | 0.2% | Aug 31, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Lockscreen state, the Q... |
| CVE-2020-25047 | MEDIUM | 5.5 | 0.1% | Aug 31, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (released in China and India) software. The S ... |
| CVE-2020-25046 | MEDIUM | 5.5 | 0.1% | Aug 31, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The USB driver leaks addres... |
| CVE-2020-2075 | HIGH | 7.5 | 1.4% | Aug 31, 2020 | Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulksca... |
| CVE-2020-24354 | HIGH | 8.8 | 1.3% | Aug 31, 2020 | Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell... |
| CVE-2020-14364 | MEDIUM | 5 | 5.4% | Aug 31, 2020 | An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue o... |
| CVE-2020-7527 | HIGH | 7.8 | 0.3% | Aug 31, 2020 | Incorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause elevation of privilege ... |
| CVE-2020-7526 | HIGH | 8.8 | 2.3% | Aug 31, 2020 | Improper Input Validation vulnerability exists in PowerChute Business Edition (software V9.0.x and earlier) which could ... |
| CVE-2020-7525 | HIGH | 7.5 | 1.5% | Aug 31, 2020 | Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and... |
| CVE-2020-7524 | HIGH | 7.5 | 1.4% | Aug 31, 2020 | Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial ... |
| CVE-2020-7523 | HIGH | 7.8 | 0.2% | Aug 31, 2020 | Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification... |
| CVE-2020-7522 | CRITICAL | 9.8 | 1.7% | Aug 31, 2020 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC E... |
| CVE-2020-7521 | CRITICAL | 9.8 | 1.7% | Aug 31, 2020 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC E... |
| CVE-2020-20628 | MEDIUM | 6.1 | 0.9% | Aug 31, 2020 | controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS. |
| CVE-2020-24699 | MEDIUM | 6.1 | 1.0% | Aug 31, 2020 | The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS. |
| CVE-2020-24363 | HIGH | 8.8 | 20.7% | Aug 31, 2020 | TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP... |
| CVE-2020-20627 | MEDIUM | 5.3 | 1.9% | Aug 31, 2020 | The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauth... |
| CVE-2020-20626 | MEDIUM | 5.4 | 0.8% | Aug 31, 2020 | lara-google-analytics.php in Lara Google Analytics plugin through 2.0.4 for WordPress allows authenticated stored XSS. |
| CVE-2020-20625 | HIGH | 7.5 | 1.7% | Aug 31, 2020 | Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated S... |
| CVE-2020-17465 | MEDIUM | 6.1 | 0.7% | Aug 31, 2020 | Dashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable to stored XSS. The vuln... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now