2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15321 | CRITICAL | 9.8 | 1.2% | Jun 29, 2020 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account. |
| CVE-2020-15320 | CRITICAL | 9.8 | 1.2% | Jun 29, 2020 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account. |
| CVE-2020-15319 | MEDIUM | 5.9 | 1.0% | Jun 29, 2020 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/mysql chroot... |
| CVE-2020-15318 | MEDIUM | 5.9 | 1.0% | Jun 29, 2020 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/mysql chroot... |
| CVE-2020-15317 | MEDIUM | 5.9 | 1.0% | Jun 29, 2020 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/axess chroot... |
| CVE-2020-15316 | MEDIUM | 5.9 | 1.0% | Jun 29, 2020 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account within the /opt/axess chro... |
| CVE-2020-15315 | MEDIUM | 5.9 | 1.0% | Jun 29, 2020 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/axess chroot... |
| CVE-2020-2021 | CRITICAL | 10 | 4.4% | Jun 29, 2020 | When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate... |
| CVE-2020-15314 | MEDIUM | 5.9 | 1.0% | Jun 29, 2020 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account. |
| CVE-2020-15313 | MEDIUM | 5.9 | 1.0% | Jun 29, 2020 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account. |
| CVE-2020-15312 | MEDIUM | 5.9 | 1.0% | Jun 29, 2020 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account. |
| CVE-2020-8573 | MEDIUM | 6.5 | 1.3% | Jun 29, 2020 | The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers (BMC) are shipped with a documented default accou... |
| CVE-2020-4557 | MEDIUM | 5.4 | 0.6% | Jun 29, 2020 | IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cro... |
| CVE-2020-4452 | HIGH | 7.5 | 0.8% | Jun 29, 2020 | IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic algorithms that could allow an a... |
| CVE-2020-13423 | MEDIUM | 4.8 | 1.4% | Jun 29, 2020 | Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Cu... |
| CVE-2020-12635 | MEDIUM | 6.1 | 0.7% | Jun 29, 2020 | XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento 2 via the textarea field. |
| CVE-2020-12048 | HIGH | 7.5 | 0.5% | Jun 29, 2020 | Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit ... |
| CVE-2020-12047 | CRITICAL | 9.8 | 1.7% | Jun 29, 2020 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX... |
| CVE-2020-12045 | CRITICAL | 9.8 | 1.7% | Jun 29, 2020 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (... |
| CVE-2020-12043 | CRITICAL | 9.8 | 2.1% | Jun 29, 2020 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP servic... |
| CVE-2020-12041 | CRITICAL | 9.4 | 1.4% | Jun 29, 2020 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensit... |
| CVE-2020-12040 | CRITICAL | 9.8 | 0.9% | Jun 29, 2020 | Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BA... |
| CVE-2020-12039 | LOW | 2.4 | 0.3% | Jun 29, 2020 | Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion Sys... |
| CVE-2020-12037 | HIGH | 7.5 | 0.5% | Jun 29, 2020 | Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit... |
| CVE-2020-12036 | HIGH | 7.5 | 0.5% | Jun 29, 2020 | Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now