2020 CVE Vulnerabilities

21,085 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-12930HIGH7.8Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their priv...
CVE-2020-35473MEDIUM4.3An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifica...
CVE-2020-12509HIGH7.5In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path trave...
CVE-2020-22820CRITICAL9.8MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter.
CVE-2020-22819CRITICAL9.8MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter.
CVE-2020-22818CRITICAL9.8MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter.
CVE-2020-36608MEDIUM6.1A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this iss...
CVE-2020-4099HIGH7.5The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forge...
CVE-2020-36605MEDIUM4.4Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe compon...
CVE-2020-23255——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2020-21016CRITICAL9.8D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/S...
CVE-2020-5355MEDIUM4.3The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and ...
CVE-2020-9285MEDIUM6.8Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware...
CVE-2020-12744HIGH7.8The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during ...
CVE-2020-23648HIGH7.5Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability. Through system.asp / start_apply.htm, an...
CVE-2020-15853MEDIUM5.3supybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS. This takes quite a whil...
CVE-2020-8976HIGH8.8The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attac...
CVE-2020-8975HIGH7.5ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, allows a remote attacker with access to the web ap...
CVE-2020-8974CRITICAL9.1In ZGR TPS200 NG 2.00 firmware version and 1.01 hardware version, the firmware upload process does not perform any type ...
CVE-2020-8973HIGH8.1ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, does not properly accept specially constructed req...
CVE-2020-35539——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2020-26866——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n...
CVE-2020-26865——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n...
CVE-2020-26864——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n...
CVE-2020-26863——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now