2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4932 | HIGH | 7.8 | 0.2% | May 5, 2021 | IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for ... |
| CVE-2020-13664 | HIGH | 8.8 | 3.0% | May 5, 2021 | Arbitrary PHP code execution vulnerability in Drupal Core under certain circumstances. An attacker could trick an admini... |
| CVE-2020-36334 | HIGH | 8.8 | 0.6% | May 5, 2021 | themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database. |
| CVE-2020-21999 | HIGH | 8.8 | 5.2% | May 4, 2021 | iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using de... |
| CVE-2020-27518 | HIGH | 7.8 | 0.5% | May 4, 2021 | All versions of Windscribe VPN for Mac and Windows <= v2.02.10 contain a local privilege escalation vulnerability in the... |
| CVE-2020-35756 | HIGH | 7.5 | 1.2% | May 3, 2021 | An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service GETPASS Configuration Passwor... |
| CVE-2020-35755 | HIGH | 7.5 | 1.1% | May 3, 2021 | An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service Read_ NVRAM Direct Access Inf... |
| CVE-2020-28944 | HIGH | 7.5 | 1.6% | Apr 30, 2021 | OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of d... |
| CVE-2020-7731 | HIGH | 7.5 | 1.7% | Apr 30, 2021 | This affects all versions <0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereferen... |
| CVE-2020-27519 | HIGH | 7.8 | 0.3% | Apr 30, 2021 | Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component. The at... |
| CVE-2020-18032 | HIGH | 7.8 | 2.6% | Apr 29, 2021 | Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to exe... |
| CVE-2020-22002 | HIGH | 7.5 | 1.4% | Apr 29, 2021 | An Unauthenticated Server-Side Request Forgery (SSRF) vulnerability exists in Inim Electronics Smartliving SmartLAN/G/SI... |
| CVE-2020-21997 | HIGH | 7.5 | 2.7% | Apr 29, 2021 | Smartwares HOME easy <=1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vul... |
| CVE-2020-21992 | HIGH | 8.8 | 5.2% | Apr 29, 2021 | Inim Electronics SmartLiving SmartLAN/G/SI <=6.x suffers from an authenticated remote command injection vulnerability. T... |
| CVE-2020-21990 | HIGH | 7.5 | 2.3% | Apr 29, 2021 | Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vuln... |
| CVE-2020-36327 | HIGH | 8.8 | 6.3% | Apr 29, 2021 | Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem ve... |
| CVE-2020-7038 | HIGH | 7.5 | 1.3% | Apr 28, 2021 | A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an una... |
| CVE-2020-7037 | HIGH | 8.1 | 1.1% | Apr 28, 2021 | An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an auth... |
| CVE-2020-22785 | HIGH | 7.5 | 1.1% | Apr 28, 2021 | Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting rando... |
| CVE-2020-22784 | HIGH | 7.5 | 1.0% | Apr 28, 2021 | In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retriev... |
| CVE-2020-22782 | HIGH | 7.5 | 1.1% | Apr 28, 2021 | Etherpad < 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import end... |
| CVE-2020-22781 | HIGH | 7.5 | 1.1% | Apr 28, 2021 | In Etherpad < 1.8.3, a specially crafted URI would raise an unhandled exception in the cache mechanism and cause a denia... |
| CVE-2020-7123 | HIGH | 7.8 | 0.2% | Apr 28, 2021 | A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5... |
| CVE-2020-21996 | HIGH | 7.5 | 3.6% | Apr 28, 2021 | AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to ca... |
| CVE-2020-18019 | HIGH | 7.5 | 1.5% | Apr 28, 2021 | SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary c... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now