2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14129 | CRITICAL | 9.8 | 0.9% | Oct 11, 2022 | A logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity verification failure, which... |
| CVE-2020-15855 | MEDIUM | 6.1 | 0.4% | Oct 7, 2022 | Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1. |
| CVE-2020-35675 | HIGH | 8.8 | 0.5% | Sep 29, 2022 | BigProf Online Invoicing System before 3.0 offers a functionality that allows an administrator to move the records of me... |
| CVE-2020-35674 | CRITICAL | 9.8 | 1.1% | Sep 29, 2022 | BigProf Online Invoicing System before 2.9 suffers from an unauthenticated SQL Injection found in /membership_passwordRe... |
| CVE-2020-27602 | CRITICAL | 9.8 | 1.4% | Sep 29, 2022 | BigBlueButton before 2.2.7 does not have a protection mechanism for separator injection in meetingId, userId, and authTo... |
| CVE-2020-27601 | LOW | 3.5 | 0.8% | Sep 29, 2022 | In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs ... |
| CVE-2020-15347 | CRITICAL | 9.8 | 1.3% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account. |
| CVE-2020-15346 | MEDIUM | 5.3 | 0.6% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key. |
| CVE-2020-15345 | MEDIUM | 5.3 | 0.6% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_instances_for_update API. |
| CVE-2020-15344 | MEDIUM | 5.3 | 0.6% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API. |
| CVE-2020-15343 | MEDIUM | 5.3 | 0.6% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API. |
| CVE-2020-15342 | MEDIUM | 5.3 | 0.6% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user API. |
| CVE-2020-15341 | HIGH | 7.5 | 1.1% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API. |
| CVE-2020-15340 | HIGH | 7.5 | 0.7% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turbolin... |
| CVE-2020-15339 | MEDIUM | 6.1 | 0.7% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle_campaign_script_link?script_n... |
| CVE-2020-15338 | MEDIUM | 5.3 | 0.8% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /cnr... |
| CVE-2020-15337 | MEDIUM | 5.3 | 0.8% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /reg... |
| CVE-2020-15334 | MEDIUM | 5.3 | 0.8% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp.log file. |
| CVE-2020-15333 | MEDIUM | 5.3 | 1.0% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select * from Administrator_... |
| CVE-2020-15332 | CRITICAL | 9.8 | 0.9% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions. |
| CVE-2020-15331 | CRITICAL | 9.8 | 0.9% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc/default/axess. |
| CVE-2020-15330 | MEDIUM | 5.3 | 0.6% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in /opt/axess/etc/default/axess. |
| CVE-2020-15329 | MEDIUM | 5.3 | 0.8% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions. |
| CVE-2020-15328 | MEDIUM | 5.3 | 0.8% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions. |
| CVE-2020-15327 | HIGH | 7.5 | 1.0% | Sep 29, 2022 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now