2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35979 | HIGH | 7.8 | 1.2% | Apr 21, 2021 | An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gp_rtp_buil... |
| CVE-2020-7851 | HIGH | 7.8 | 0.7% | Apr 19, 2021 | Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could ... |
| CVE-2020-9668 | HIGH | 7.8 | 1.6% | Apr 16, 2021 | Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling sy... |
| CVE-2020-28593 | HIGH | 8.1 | 1.9% | Apr 15, 2021 | A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-AF... |
| CVE-2020-36120 | HIGH | 7.5 | 1.2% | Apr 14, 2021 | Buffer Overflow in the "sixel_encoder_encode_bytes" function of Libsixel v1.8.6 allows attackers to cause a Denial of Se... |
| CVE-2020-36323 | HIGH | 8.2 | 2.0% | Apr 14, 2021 | In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized... |
| CVE-2020-27228 | HIGH | 7.8 | 0.8% | Apr 13, 2021 | An incorrect default permissions vulnerability exists in the installation functionality of OpenClinic GA 5.173.3. Overwr... |
| CVE-2020-13568 | HIGH | 8.8 | 29.7% | Apr 13, 2021 | SQL injection vulnerability exists in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An at... |
| CVE-2020-13566 | HIGH | 8.8 | 1.6% | Apr 13, 2021 | SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An a... |
| CVE-2020-4965 | HIGH | 7.5 | 0.7% | Apr 12, 2021 | IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt ... |
| CVE-2020-24285 | HIGH | 7.5 | 4.7% | Apr 12, 2021 | INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgi... |
| CVE-2020-36317 | HIGH | 7.5 | 1.5% | Apr 11, 2021 | In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation ... |
| CVE-2020-13592 | HIGH | 8.8 | 1.5% | Apr 9, 2021 | An exploitable SQL injection vulnerability exists in "global_lists/choices" page of the Rukovoditel Project Management A... |
| CVE-2020-13591 | HIGH | 8.8 | 1.5% | Apr 9, 2021 | An exploitable SQL injection vulnerability exists in the "access_rules/rules_form" page of the Rukovoditel Project Manag... |
| CVE-2020-13587 | HIGH | 8.8 | 1.5% | Apr 9, 2021 | An exploitable SQL injection vulnerability exists in the "forms_fields_rules/rules" page of the Rukovoditel Project Mana... |
| CVE-2020-13534 | HIGH | 7.8 | 0.9% | Apr 9, 2021 | A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream R... |
| CVE-2020-13533 | HIGH | 7.8 | 0.4% | Apr 9, 2021 | A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following regist... |
| CVE-2020-13532 | HIGH | 7.8 | 0.4% | Apr 9, 2021 | A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashbo... |
| CVE-2020-21884 | HIGH | 8.8 | 1.2% | Apr 9, 2021 | Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF)... |
| CVE-2020-21883 | HIGH | 8.8 | 6.0% | Apr 9, 2021 | Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerabili... |
| CVE-2020-6590 | HIGH | 7.5 | 1.0% | Apr 8, 2021 | Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information dis... |
| CVE-2020-14104 | HIGH | 8.1 | 0.7% | Apr 8, 2021 | A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50. |
| CVE-2020-14099 | HIGH | 7.5 | 0.6% | Apr 8, 2021 | On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backu... |
| CVE-2020-23539 | HIGH | 7.5 | 1.8% | Apr 8, 2021 | An issue was discovered in Realtek rtl8723de BLE Stack <= 4.1 that allows remote attackers to cause a Denial of Service ... |
| CVE-2020-24140 | HIGH | 8.3 | 1.2% | Apr 7, 2021 | Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now