2020 CVE Vulnerabilities

21,085 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-7850HIGH7.8NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded a...
CVE-2020-7468HIGH8.8In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 1...
CVE-2020-7467HIGH7.6In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 1...
CVE-2020-7461HIGH7.3In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 1...
CVE-2020-25582HIGH8.7In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 whe...
CVE-2020-25581HIGH7.5In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due...
CVE-2020-28695HIGH8.8Askey Fiber Router RTF3505VW-N1 BR_SV_g000_R3505VWN1001_s32_7 devices allow Remote Code Execution and retrieval of admin...
CVE-2020-28346HIGH7.5ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference.
CVE-2020-10584HIGH7.5A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) through 5.0 allows ...
CVE-2020-10583HIGH8.8The /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attacke...
CVE-2020-10581HIGH7.5Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Management (...
CVE-2020-10580HIGH8.8A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) through 5.0 allows re...
CVE-2020-10579HIGH7.5A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) through 5.0 allows rem...
CVE-2020-35502HIGH7.5A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is ...
CVE-2020-6790HIGH7.8Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to a...
CVE-2020-6789HIGH7.8Loading a DLL through an Uncontrolled Search Path Element in the Bosch Monitor Wall installer up to and including versio...
CVE-2020-6788HIGH7.8Loading a DLL through an Uncontrolled Search Path Element in the Bosch Configuration Manager installer up to and includi...
CVE-2020-6787HIGH7.8Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Client installer up to and including versio...
CVE-2020-6786HIGH7.8Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Recording Manager installer up to and inclu...
CVE-2020-6785HIGH7.8Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0...
CVE-2020-6771HIGH7.8Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 poten...
CVE-2020-7852HIGH7.8DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is...
CVE-2020-26283HIGH8.8go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipf...
CVE-2020-26279HIGH8.1go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipf...
CVE-2020-36283HIGH8.8HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode). By...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now