2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27632 | HIGH | 7.5 | 1.2% | Mar 10, 2021 | In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constan... |
| CVE-2020-19419 | HIGH | 7.5 | 3.0% | Mar 10, 2021 | Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive devic... |
| CVE-2020-19417 | HIGH | 8.8 | 2.7% | Mar 10, 2021 | Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform ... |
| CVE-2020-1921 | HIGH | 7.5 | 1.2% | Mar 10, 2021 | In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that th... |
| CVE-2020-1919 | HIGH | 7.5 | 1.2% | Mar 10, 2021 | Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument pass... |
| CVE-2020-1918 | HIGH | 7.5 | 1.2% | Mar 10, 2021 | In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the r... |
| CVE-2020-0025 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to a... |
| CVE-2020-23722 | HIGH | 8.8 | 1.0% | Mar 10, 2021 | An issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to obtain super admin privil... |
| CVE-2020-13936 | HIGH | 8.8 | 22.7% | Mar 10, 2021 | An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands w... |
| CVE-2020-29238 | HIGH | 7.5 | 16.7% | Mar 10, 2021 | An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensi... |
| CVE-2020-35524 | HIGH | 7.8 | 1.9% | Mar 9, 2021 | A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A spec... |
| CVE-2020-35523 | HIGH | 7.8 | 1.9% | Mar 9, 2021 | An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to in... |
| CVE-2020-28952 | HIGH | 7.5 | 1.3% | Mar 9, 2021 | An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique S... |
| CVE-2020-27225 | HIGH | 7.8 | 0.3% | Mar 9, 2021 | In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to t... |
| CVE-2020-27575 | HIGH | 8.8 | 4.6% | Mar 8, 2021 | Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functio... |
| CVE-2020-27574 | HIGH | 8.8 | 0.8% | Mar 8, 2021 | Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malic... |
| CVE-2020-4695 | HIGH | 7.5 | 0.8% | Mar 8, 2021 | IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens ... |
| CVE-2020-23967 | HIGH | 7.8 | 0.3% | Mar 8, 2021 | Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges ... |
| CVE-2020-28466 | HIGH | 7.5 | 3.7% | Mar 7, 2021 | This affects all versions of package github.com/nats-io/nats-server/server. Untrusted accounts are able to crash the ser... |
| CVE-2020-29030 | HIGH | 8.8 | 0.5% | Mar 5, 2021 | Cross-Site Request Forgery (CSRF) vulnerability in web GUI of Secomea GateManager allows an attacker to execute maliciou... |
| CVE-2020-29020 | HIGH | 7.2 | 1.7% | Mar 5, 2021 | Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI ... |
| CVE-2020-28502 | HIGH | 8.1 | 4.6% | Mar 5, 2021 | This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are ... |
| CVE-2020-29032 | HIGH | 7.2 | 0.5% | Mar 5, 2021 | Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated att... |
| CVE-2020-29134 | HIGH | 8.6 | 15.0% | Mar 5, 2021 | The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all v... |
| CVE-2020-5148 | HIGH | 8.2 | 0.8% | Mar 5, 2021 | SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing m... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now