2020 CVE Vulnerabilities

21,085 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-12967HIGH7.2The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code executio...
CVE-2020-36197HIGH8.8An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, th...
CVE-2020-27840HIGH7.5A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause in...
CVE-2020-28393HIGH7.5An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSP...
CVE-2020-25242HIGH7.5A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC NET...
CVE-2020-18964HIGH8.8Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website Management background, whic...
CVE-2020-27246HIGH8.8An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The...
CVE-2020-27245HIGH8.8An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The...
CVE-2020-27244HIGH8.8An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The...
CVE-2020-27243HIGH8.8An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The...
CVE-2020-27242HIGH8.8An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The...
CVE-2020-23575HIGH7.5A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successful exploitation of this vulnera...
CVE-2020-28600HIGH7.8An out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12...
CVE-2020-27232HIGH8.8An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A speciall...
CVE-2020-27231HIGH8.8A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 applicat...
CVE-2020-27230HIGH8.8A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 applicat...
CVE-2020-27229HIGH8.8A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 applicat...
CVE-2020-27226HIGH8.8An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3. A specially crafted ...
CVE-2020-19199HIGH8.8A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let ...
CVE-2020-22809HIGH7.8In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation.
CVE-2020-36128HIGH8.2Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment term...
CVE-2020-36126HIGH8.1Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control that can lead to remote ...
CVE-2020-36125HIGH7.1Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalidat...
CVE-2020-11295HIGH7.8Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapd...
CVE-2020-11294HIGH7.8Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, S...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now