2020 CVE Vulnerabilities
21,074 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12047 | CRITICAL | 9.8 | 1.7% | Jun 29, 2020 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX... |
| CVE-2020-12045 | CRITICAL | 9.8 | 1.7% | Jun 29, 2020 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (... |
| CVE-2020-12043 | CRITICAL | 9.8 | 2.1% | Jun 29, 2020 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP servic... |
| CVE-2020-12041 | CRITICAL | 9.4 | 1.4% | Jun 29, 2020 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensit... |
| CVE-2020-12040 | CRITICAL | 9.8 | 0.9% | Jun 29, 2020 | Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BA... |
| CVE-2020-12039 | LOW | 2.4 | 0.3% | Jun 29, 2020 | Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion Sys... |
| CVE-2020-12037 | HIGH | 7.5 | 0.5% | Jun 29, 2020 | Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit... |
| CVE-2020-12036 | HIGH | 7.5 | 0.5% | Jun 29, 2020 | Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit... |
| CVE-2020-12035 | MEDIUM | 4.9 | 0.2% | Jun 29, 2020 | Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service p... |
| CVE-2020-12032 | CRITICAL | 9.1 | 0.9% | Jun 29, 2020 | Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensi... |
| CVE-2020-12024 | MEDIUM | 6.1 | 0.3% | Jun 29, 2020 | Baxter ExactaMix EM 2400 versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2, 1.4 and 1.5 does not re... |
| CVE-2020-12020 | MEDIUM | 6.1 | 0.3% | Jun 29, 2020 | Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 does not restrict... |
| CVE-2020-12016 | CRITICAL | 9.8 | 1.9% | Jun 29, 2020 | Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions... |
| CVE-2020-12012 | MEDIUM | 6.1 | 0.3% | Jun 29, 2020 | Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions... |
| CVE-2020-12008 | HIGH | 7.5 | 0.9% | Jun 29, 2020 | Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to co... |
| CVE-2020-8019 | HIGH | 7.8 | 0.5% | Jun 29, 2020 | A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo ... |
| CVE-2020-8014 | HIGH | 7.8 | 0.5% | Jun 29, 2020 | A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE ... |
| CVE-2020-8022 | HIGH | 7.8 | 0.9% | Jun 29, 2020 | A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterp... |
| CVE-2020-8024 | MEDIUM | 5.3 | 0.5% | Jun 29, 2020 | A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, op... |
| CVE-2020-15365 | MEDIUM | 6.5 | 1.3% | Jun 28, 2020 | LibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() in metadata\exif_gps.cpp via an unrecognized AtomNam... |
| CVE-2020-15364 | MEDIUM | 6.1 | 3.7% | Jun 28, 2020 | The Nexos theme through 1.7 for WordPress allows top-map/?search_location= reflected XSS. |
| CVE-2020-15363 | CRITICAL | 9.8 | 5.9% | Jun 28, 2020 | The Nexos theme through 1.7 for WordPress allows side-map/?search_order= SQL Injection. |
| CVE-2020-15360 | HIGH | 7.8 | 0.7% | Jun 27, 2020 | com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification. |
| CVE-2020-15358 | MEDIUM | 5.5 | 1.0% | Jun 27, 2020 | In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow... |
| CVE-2020-4089 | MEDIUM | 6.5 | 1.2% | Jun 26, 2020 | HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vuln... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now