2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-16215 | HIGH | 7.8 | 4.0% | Aug 6, 2020 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper... |
| CVE-2020-16213 | HIGH | 7.8 | 3.0% | Aug 6, 2020 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper... |
| CVE-2020-16211 | MEDIUM | 5.5 | 1.3% | Aug 6, 2020 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read vulnerability may be exploited by p... |
| CVE-2020-16207 | HIGH | 7.8 | 3.7% | Aug 6, 2020 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may b... |
| CVE-2020-13793 | CRITICAL | 9.8 | 1.7% | Aug 6, 2020 | Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key. |
| CVE-2020-12441 | CRITICAL | 9.8 | 3.8% | Aug 6, 2020 | Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parse... |
| CVE-2020-16845 | HIGH | 7.5 | 4.7% | Aug 6, 2020 | Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary... |
| CVE-2020-7817 | HIGH | 7.8 | 0.3% | Aug 6, 2020 | MyBrowserPlus downloads the files needed to run the program through the setup file (Setup.inf). At this time, there is a... |
| CVE-2020-7460 | HIGH | 7 | 0.7% | Aug 6, 2020 | In FreeBSD 12.1-STABLE before r363918, 12.1-RELEASE before p8, 11.4-STABLE before r363919, 11.4-RELEASE before p2, and 1... |
| CVE-2020-7459 | MEDIUM | 6.8 | 0.4% | Aug 6, 2020 | In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 1... |
| CVE-2020-13365 | HIGH | 8.8 | 1.0% | Aug 6, 2020 | Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocu... |
| CVE-2020-13364 | HIGH | 8.8 | 1.2% | Aug 6, 2020 | A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21(AASZ.4)C0, ... |
| CVE-2020-7361 | HIGH | 8.8 | 17.2% | Aug 6, 2020 | The EasyCorp ZenTao Pro application suffers from an OS command injection vulnerability in its '/pro/repo-create.html' co... |
| CVE-2020-7357 | CRITICAL | 9.9 | 33.9% | Aug 6, 2020 | Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This ca... |
| CVE-2020-7356 | CRITICAL | 9.8 | 14.0% | Aug 6, 2020 | CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_s... |
| CVE-2020-7352 | HIGH | 8.8 | 3.8% | Aug 6, 2020 | The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to th... |
| CVE-2020-9036 | MEDIUM | 6.1 | 3.6% | Aug 5, 2020 | Jeedom through 4.0.38 allows XSS. |
| CVE-2020-17366 | HIGH | 7.4 | 0.7% | Aug 5, 2020 | An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended acce... |
| CVE-2020-7298 | HIGH | 8.4 | 0.3% | Aug 5, 2020 | Unexpected behavior violation in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to turn off real tim... |
| CVE-2020-15132 | MEDIUM | 5.3 | 1.1% | Aug 5, 2020 | In Sulu before versions 1.6.35, 2.0.10, and 2.1.1, when the "Forget password" feature on the login screen is used, Sulu ... |
| CVE-2020-15127 | HIGH | 7.5 | 1.4% | Aug 5, 2020 | In Contour ( Ingress controller for Kubernetes) before version 1.7.0, a bad actor can shut down all instances of Envoy, ... |
| CVE-2020-13404 | HIGH | 8.8 | 6.5% | Aug 5, 2020 | The ATOS/Sips (aka Atos-Magento) community module 3.0.0 to 3.0.5 for Magento allows command injection. |
| CVE-2020-16254 | MEDIUM | 6.1 | 0.8% | Aug 5, 2020 | The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). |
| CVE-2020-15113 | HIGH | 7.1 | 0.2% | Aug 5, 2020 | In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created (etcd data directory and the directory pa... |
| CVE-2020-15112 | MEDIUM | 6.5 | 1.3% | Aug 5, 2020 | In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in t... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now