2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10554 | HIGH | 7.5 | 0.8% | Feb 5, 2021 | An issue was discovered in Psyprax beforee 3.2.2. Passwords used to encrypt the data are stored in the database in an ob... |
| CVE-2020-10552 | HIGH | 8.1 | 1.1% | Feb 5, 2021 | An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and pa... |
| CVE-2020-18750 | HIGH | 7.8 | 0.5% | Feb 5, 2021 | Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file. |
| CVE-2020-8806 | HIGH | 7.5 | 1.0% | Feb 5, 2021 | Electric Coin Company Zcashd before 2.1.1-1 allows attackers to trigger consensus failure and double spending. A valid c... |
| CVE-2020-35765 | HIGH | 8.8 | 28.2% | Feb 5, 2021 | doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows ... |
| CVE-2020-10537 | HIGH | 7.8 | 0.3% | Feb 5, 2021 | An issue was discovered in Epikur before 20.1.1. A Glassfish 4.1 server with a default configuration is running on TCP p... |
| CVE-2020-27872 | HIGH | 8.8 | 0.9% | Feb 4, 2021 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450... |
| CVE-2020-28450 | HIGH | 8.6 | 1.8% | Feb 4, 2021 | This affects all versions of package decal. The vulnerability is in the extend function. |
| CVE-2020-28449 | HIGH | 8.6 | 1.8% | Feb 4, 2021 | This affects all versions of package decal. The vulnerability is in the set function. |
| CVE-2020-6088 | HIGH | 7.5 | 3.5% | Feb 4, 2021 | An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Br... |
| CVE-2020-27249 | HIGH | 7.8 | 1.2% | Feb 4, 2021 | A specially crafted document can cause the document parser to copy data from a particular record type into a static-size... |
| CVE-2020-27248 | HIGH | 7.8 | 1.2% | Feb 4, 2021 | A specially crafted document can cause the document parser to copy data from a particular record type into a static-size... |
| CVE-2020-27247 | HIGH | 7.8 | 1.2% | Feb 4, 2021 | A specially crafted document can cause the document parser to copy data from a particular record type into a static-size... |
| CVE-2020-14246 | HIGH | 7.5 | 0.7% | Feb 4, 2021 | HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potenti... |
| CVE-2020-13586 | HIGH | 7.8 | 1.5% | Feb 4, 2021 | A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software Gmb... |
| CVE-2020-13580 | HIGH | 7.8 | 72.6% | Feb 4, 2021 | An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMa... |
| CVE-2020-13579 | HIGH | 7.8 | 72.6% | Feb 4, 2021 | An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office... |
| CVE-2020-25857 | HIGH | 7.5 | 1.2% | Feb 3, 2021 | The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to ... |
| CVE-2020-25856 | HIGH | 8.1 | 2.2% | Feb 3, 2021 | The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and e... |
| CVE-2020-25855 | HIGH | 8.1 | 2.6% | Feb 3, 2021 | The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and exclu... |
| CVE-2020-25854 | HIGH | 8.1 | 2.6% | Feb 3, 2021 | The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and e... |
| CVE-2020-25853 | HIGH | 7.5 | 1.2% | Feb 3, 2021 | The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excludi... |
| CVE-2020-17516 | HIGH | 7.5 | 1.9% | Feb 3, 2021 | Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'r... |
| CVE-2020-35667 | HIGH | 7.5 | 1.3% | Feb 3, 2021 | JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials. |
| CVE-2020-28895 | HIGH | 7.3 | 1.5% | Feb 3, 2021 | In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated b... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now