2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10275 | CRITICAL | 9.8 | 1.0% | Jun 24, 2020 | The access tokens for the REST API are directly derived from the publicly available default credentials for the web inte... |
| CVE-2020-10274 | HIGH | 7.1 | 0.9% | Jun 24, 2020 | The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly available default... |
| CVE-2020-10273 | HIGH | 7.5 | 0.9% | Jun 24, 2020 | MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellectual proper... |
| CVE-2020-10272 | CRITICAL | 9.8 | 2.5% | Jun 24, 2020 | MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computational gra... |
| CVE-2020-10271 | CRITICAL | 9.8 | 1.8% | Jun 24, 2020 | MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computational gra... |
| CVE-2020-10270 | CRITICAL | 9.8 | 1.7% | Jun 24, 2020 | Out of the wired and wireless interfaces within MiR100, MiR200 and other vehicles from the MiR fleet, it's possible to a... |
| CVE-2020-10269 | CRITICAL | 9.8 | 1.4% | Jun 24, 2020 | One of the wireless interfaces within MiR100, MiR200 and possibly (according to the vendor) other MiR fleet vehicles com... |
| CVE-2020-9480 | CRITICAL | 9.8 | 29.2% | Jun 23, 2020 | In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (s... |
| CVE-2020-12033 | HIGH | 8.8 | 1.1% | Jun 23, 2020 | In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not ... |
| CVE-2020-12021 | CRITICAL | 9 | 1.6% | Jun 23, 2020 | In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cros... |
| CVE-2020-5367 | HIGH | 8.1 | 0.6% | Jun 23, 2020 | Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions p... |
| CVE-2020-5345 | MEDIUM | 5.4 | 0.7% | Jun 23, 2020 | Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions p... |
| CVE-2020-14978 | HIGH | 8.1 | 3.1% | Jun 23, 2020 | An issue was discovered in F-Secure SAFE 17.7 on macOS. Due to incorrect client version verification, an attacker can co... |
| CVE-2020-14977 | HIGH | 8.1 | 2.8% | Jun 23, 2020 | An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, ... |
| CVE-2020-14976 | MEDIUM | 5.5 | 0.5% | Jun 23, 2020 | GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary fi... |
| CVE-2020-14975 | HIGH | 7.8 | 0.6% | Jun 23, 2020 | The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code ... |
| CVE-2020-14974 | HIGH | 7.1 | 0.9% | Jun 23, 2020 | The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes (even ones running a... |
| CVE-2020-14073 | MEDIUM | 5.4 | 2.9% | Jun 23, 2020 | XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can c... |
| CVE-2020-13157 | MEDIUM | 6.5 | 0.6% | Jun 23, 2020 | modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=... |
| CVE-2020-13156 | MEDIUM | 6.5 | 0.6% | Jun 23, 2020 | modules\users\admin\add_user.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=u... |
| CVE-2020-13155 | HIGH | 8.8 | 0.7% | Jun 23, 2020 | clearsystem.php in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the admin/index.p... |
| CVE-2020-7668 | HIGH | 7.5 | 1.3% | Jun 23, 2020 | In all versions of the package github.com/unknwon/cae/tz, the ExtractTo function doesn't securely escape file paths in z... |
| CVE-2020-7664 | HIGH | 7.5 | 1.4% | Jun 23, 2020 | In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in ... |
| CVE-2020-4188 | MEDIUM | 5.3 | 1.1% | Jun 23, 2020 | IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends o... |
| CVE-2020-11068 | HIGH | 8.8 | 0.9% | Jun 23, 2020 | In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked. ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now