2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36560 | CRITICAL | 9.1 | 1.2% | Dec 27, 2022 | Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten... |
| CVE-2020-36559 | HIGH | 7.5 | 1.1% | Dec 27, 2022 | Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to re... |
| CVE-2020-36567 | HIGH | 7.5 | 1.4% | Dec 27, 2022 | Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbi... |
| CVE-2020-36626 | MEDIUM | 6.1 | 0.6% | Dec 27, 2022 | A vulnerability classified as critical has been found in Modern Tribe Panel Builder Plugin. Affected is the function add... |
| CVE-2020-36634 | MEDIUM | 5.4 | 0.5% | Dec 27, 2022 | A vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the functi... |
| CVE-2020-36633 | MEDIUM | 6.5 | 0.3% | Dec 27, 2022 | A vulnerability was found in moodle-block_sitenews 1.0. It has been classified as problematic. This affects the function... |
| CVE-2020-28191 | HIGH | 8.8 | 0.4% | Dec 26, 2022 | The console in Togglz before 2.9.4 allows CSRF. |
| CVE-2020-24600 | CRITICAL | 9.8 | 0.9% | Dec 26, 2022 | Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request. |
| CVE-2020-11101 | CRITICAL | 9.8 | 0.9% | Dec 26, 2022 | Sierra Wireless AirLink Mobility Manager (AMM) before 2.17 mishandles sessions and thus an unauthenticated attacker can ... |
| CVE-2020-10650 | HIGH | 8.1 | 3.3% | Dec 26, 2022 | A deserialization flaw was discovered in jackson-databind through 2.9.10.4. It could allow an unauthenticated user to pe... |
| CVE-2020-12069 | HIGH | 7.8 | 0.2% | Dec 26, 2022 | In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system sto... |
| CVE-2020-12067 | HIGH | 7.5 | 0.5% | Dec 26, 2022 | In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed b... |
| CVE-2020-36632 | CRITICAL | 9.8 | 1.1% | Dec 25, 2022 | A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unfla... |
| CVE-2020-36631 | CRITICAL | 9.8 | 0.7% | Dec 25, 2022 | A vulnerability was found in barronwaffles dwc_network_server_emulator. It has been declared as critical. This vulnerabi... |
| CVE-2020-36630 | CRITICAL | 9.8 | 0.7% | Dec 25, 2022 | A vulnerability was found in FreePBX cdr 14.0. It has been classified as critical. This affects the function ajaxHandler... |
| CVE-2020-36629 | HIGH | 7.5 | 0.8% | Dec 25, 2022 | A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpath... |
| CVE-2020-36628 | CRITICAL | 9.8 | 0.9% | Dec 25, 2022 | A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the fi... |
| CVE-2020-36627 | MEDIUM | 6.1 | 0.6% | Dec 25, 2022 | A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unk... |
| CVE-2020-26302 | HIGH | 7.5 | 0.9% | Dec 22, 2022 | is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vuln... |
| CVE-2020-15685 | HIGH | 8.8 | 0.9% | Dec 22, 2022 | During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated wi... |
| CVE-2020-15679 | HIGH | 7.6 | 0.5% | Dec 22, 2022 | An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL,... |
| CVE-2020-36625 | HIGH | 8.8 | 0.3% | Dec 22, 2022 | A vulnerability was found in destiny.gg chat. It has been rated as problematic. This issue affects the function websocke... |
| CVE-2020-36624 | MEDIUM | 6.1 | 0.6% | Dec 22, 2022 | A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affe... |
| CVE-2020-36623 | MEDIUM | 6.5 | 0.3% | Dec 21, 2022 | A vulnerability was found in Pengu. It has been declared as problematic. Affected by this vulnerability is the function ... |
| CVE-2020-36622 | MEDIUM | 6.5 | 0.3% | Dec 21, 2022 | A vulnerability was found in sah-comp bienlein and classified as problematic. This issue affects some unknown processing... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now