2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-22000 | HIGH | 8 | 1.1% | Apr 27, 2021 | HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. ... |
| CVE-2020-21989 | HIGH | 8.8 | 0.7% | Apr 27, 2021 | HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform... |
| CVE-2020-17517 | HIGH | 7.5 | 2.3% | Apr 27, 2021 | The S3 buckets and keys in a secure Apache Ozone Cluster must be inaccessible to anonymous access by default. The curren... |
| CVE-2020-36325 | HIGH | 7.5 | 1.7% | Apr 26, 2021 | An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds read-a... |
| CVE-2020-15078 | HIGH | 7.5 | 5.1% | Apr 26, 2021 | OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on... |
| CVE-2020-7034 | HIGH | 8.8 | 2.4% | Apr 23, 2021 | A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote... |
| CVE-2020-7385 | HIGH | 8.8 | 1.8% | Apr 23, 2021 | By launching the drb_remote_codeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the sa... |
| CVE-2020-36321 | HIGH | 7.5 | 1.2% | Apr 23, 2021 | Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 (Vaadin 14.0.... |
| CVE-2020-36320 | HIGH | 7.5 | 2.0% | Apr 23, 2021 | Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 (Vaadin 7.0.0 ... |
| CVE-2020-27738 | HIGH | 7.4 | 3.7% | Apr 22, 2021 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ether... |
| CVE-2020-27009 | HIGH | 8.1 | 7.2% | Apr 22, 2021 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ether... |
| CVE-2020-26997 | HIGH | 7.8 | 1.0% | Apr 22, 2021 | A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < ... |
| CVE-2020-25244 | HIGH | 8.4 | 0.2% | Apr 22, 2021 | A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). The software insecurely loads libraries... |
| CVE-2020-15795 | HIGH | 8.1 | 6.4% | Apr 22, 2021 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ether... |
| CVE-2020-7858 | HIGH | 8.6 | 1.1% | Apr 22, 2021 | There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download p... |
| CVE-2020-27569 | HIGH | 7.5 | 0.9% | Apr 21, 2021 | Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is ... |
| CVE-2020-27568 | HIGH | 7.5 | 1.6% | Apr 21, 2021 | Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found... |
| CVE-2020-28973 | HIGH | 7.5 | 1.0% | Apr 21, 2021 | The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in... |
| CVE-2020-23931 | HIGH | 7.1 | 0.9% | Apr 21, 2021 | An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer ove... |
| CVE-2020-23928 | HIGH | 7.1 | 0.9% | Apr 21, 2021 | An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer ove... |
| CVE-2020-23922 | HIGH | 7.1 | 2.2% | Apr 21, 2021 | An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read. |
| CVE-2020-23921 | HIGH | 7.1 | 0.9% | Apr 21, 2021 | An issue was discovered in fast_ber through v0.4. yy::yylex() in asn_compiler.hpp has a heap-based buffer over-read. |
| CVE-2020-35982 | HIGH | 7.8 | 1.1% | Apr 21, 2021 | An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gf_hint... |
| CVE-2020-35981 | HIGH | 7.8 | 1.1% | Apr 21, 2021 | An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWr... |
| CVE-2020-35980 | HIGH | 7.8 | 1.2% | Apr 21, 2021 | An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is a use-after-free in the function gf_isom_box_del() in ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now