2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15781 | CRITICAL | 9.6 | 1.0% | Aug 14, 2020 | A vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs (All versions < V05.30). The login screen... |
| CVE-2020-10055 | CRITICAL | 9.8 | 6.0% | Aug 14, 2020 | A vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4.x), Desigo CC Compact (... |
| CVE-2020-9229 | MEDIUM | 4.4 | 0.2% | Aug 14, 2020 | FusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection of certain information, ... |
| CVE-2020-9228 | HIGH | 7.5 | 0.8% | Aug 14, 2020 | FusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection of certain information, ... |
| CVE-2020-7701 | CRITICAL | 9.8 | 2.1% | Aug 14, 2020 | madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue. |
| CVE-2020-7700 | CRITICAL | 9.8 | 1.9% | Aug 14, 2020 | All versions of phpjs are vulnerable to Prototype Pollution via parse_str. |
| CVE-2020-17462 | HIGH | 7.8 | 1.0% | Aug 14, 2020 | CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a... |
| CVE-2020-16205 | HIGH | 7.2 | 60.4% | Aug 14, 2020 | Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code ... |
| CVE-2020-12648 | MEDIUM | 6.1 | 1.8% | Aug 14, 2020 | A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web ... |
| CVE-2020-4662 | HIGH | 8.8 | 1.3% | Aug 14, 2020 | IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication v... |
| CVE-2020-7360 | HIGH | 7.3 | 0.5% | Aug 13, 2020 | An Uncontrolled Search Path Element (CWE-427) vulnerability in SmartControl version 4.3.15 and versions released before ... |
| CVE-2020-24349 | MEDIUM | 5.5 | 0.5% | Aug 13, 2020 | njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor cons... |
| CVE-2020-24348 | MEDIUM | 5.5 | 0.4% | Aug 13, 2020 | njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c. |
| CVE-2020-24347 | MEDIUM | 5.5 | 0.4% | Aug 13, 2020 | njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c. |
| CVE-2020-24346 | HIGH | 7.8 | 1.0% | Aug 13, 2020 | njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c. |
| CVE-2020-24345 | HIGH | 7.8 | 0.8% | Aug 13, 2020 | JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the ve... |
| CVE-2020-24344 | HIGH | 7.1 | 0.8% | Aug 13, 2020 | JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read. |
| CVE-2020-24343 | HIGH | 7.8 | 0.8% | Aug 13, 2020 | Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c. |
| CVE-2020-24342 | HIGH | 7.8 | 1.1% | Aug 13, 2020 | Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_ca... |
| CVE-2020-24332 | MEDIUM | 5.5 | 0.6% | Aug 13, 2020 | An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of ... |
| CVE-2020-24331 | HIGH | 7.8 | 0.5% | Aug 13, 2020 | An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user sti... |
| CVE-2020-24330 | HIGH | 7.8 | 0.5% | Aug 13, 2020 | An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the... |
| CVE-2020-17498 | MEDIUM | 6.5 | 2.9% | Aug 13, 2020 | In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafk... |
| CVE-2020-0261 | HIGH | 7.8 | 0.2% | Aug 13, 2020 | In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. This could lead to local... |
| CVE-2020-14483 | MEDIUM | 4.3 | 0.4% | Aug 13, 2020 | A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now