2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14496 | CRITICAL | 9.8 | 0.8% | May 19, 2022 | Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software P... |
| CVE-2020-4970 | MEDIUM | 5.9 | 0.7% | May 19, 2022 | IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain sensit... |
| CVE-2020-4994 | HIGH | 7.5 | 1.4% | May 17, 2022 | IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a ... |
| CVE-2020-4957 | MEDIUM | 5.3 | 0.8% | May 17, 2022 | IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that coul... |
| CVE-2020-22983 | HIGH | 8.1 | 2.5% | May 13, 2022 | A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unaut... |
| CVE-2020-22987 | MEDIUM | 6.1 | 1.4% | May 12, 2022 | Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attac... |
| CVE-2020-22986 | MEDIUM | 6.1 | 1.5% | May 12, 2022 | Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attac... |
| CVE-2020-22985 | MEDIUM | 6.1 | 1.5% | May 12, 2022 | Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attac... |
| CVE-2020-22984 | MEDIUM | 6.1 | 1.5% | May 12, 2022 | Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attac... |
| CVE-2020-19228 | HIGH | 7.2 | 1.3% | May 11, 2022 | An issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers to upload arbitrary fi... |
| CVE-2020-19217 | HIGH | 8.8 | 0.9% | May 6, 2022 | SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?... |
| CVE-2020-19216 | HIGH | 8.8 | 0.9% | May 6, 2022 | SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group... |
| CVE-2020-19215 | HIGH | 8.8 | 0.9% | May 6, 2022 | SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_... |
| CVE-2020-19213 | CRITICAL | 9.8 | 15.8% | May 6, 2022 | SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories. |
| CVE-2020-19212 | MEDIUM | 4.9 | 0.8% | May 6, 2022 | SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete. |
| CVE-2020-23621 | CRITICAL | 9.8 | 1.9% | May 2, 2022 | The Java Remote Management Interface of all versions of SVI MS Management System was discovered to contain a vulnerabili... |
| CVE-2020-23620 | CRITICAL | 9.8 | 1.9% | May 2, 2022 | The Java Remote Management Interface of all versions of Orlansoft ERP was discovered to contain a vulnerability due to i... |
| CVE-2020-23618 | MEDIUM | 6.1 | 0.5% | May 2, 2022 | A reflected cross site scripting (XSS) vulnerability in Xtend Voice Logger 1.0 allows attackers to execute arbitrary web... |
| CVE-2020-23617 | MEDIUM | 6.1 | 0.5% | May 2, 2022 | A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers ... |
| CVE-2020-14123 | HIGH | 7.5 | 0.9% | Apr 22, 2022 | There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory pointer is cop... |
| CVE-2020-14122 | MEDIUM | 5.5 | 0.1% | Apr 21, 2022 | Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific identity d... |
| CVE-2020-14121 | MEDIUM | 5.5 | 0.2% | Apr 21, 2022 | A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of th... |
| CVE-2020-14120 | HIGH | 8.8 | 0.4% | Apr 21, 2022 | Some Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by the lack of checksum wh... |
| CVE-2020-14118 | MEDIUM | 6.1 | 0.5% | Apr 21, 2022 | An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does n... |
| CVE-2020-14117 | MEDIUM | 5.3 | 0.6% | Apr 21, 2022 | A improper permission configuration vulnerability in Xiaomi Content Center APP. This vulnerability is caused by the lack... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now