2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27222 | HIGH | 7.5 | 0.9% | Feb 3, 2021 | In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, ... |
| CVE-2020-29166 | HIGH | 7.5 | 2.3% | Feb 3, 2021 | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote in... |
| CVE-2020-29163 | HIGH | 8.8 | 1.1% | Feb 3, 2021 | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection. |
| CVE-2020-35152 | HIGH | 7.8 | 0.3% | Feb 3, 2021 | Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process run... |
| CVE-2020-8672 | HIGH | 7.8 | 0.3% | Feb 2, 2021 | Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series ... |
| CVE-2020-1910 | HIGH | 7.8 | 5.1% | Feb 2, 2021 | A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13... |
| CVE-2020-14255 | HIGH | 7.5 | 1.1% | Feb 2, 2021 | HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties v... |
| CVE-2020-8101 | HIGH | 8.8 | 1.2% | Feb 2, 2021 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of A... |
| CVE-2020-28495 | HIGH | 7.3 | 3.6% | Feb 2, 2021 | This affects the package total.js before 3.4.7. The set function can be used to set a value into the object according to... |
| CVE-2020-28494 | HIGH | 8.6 | 1.7% | Feb 2, 2021 | This affects the package total.js before 3.4.7. The issue occurs in the image.pipe and image.stream functions. The type ... |
| CVE-2020-24335 | HIGH | 7.5 | 3.0% | Feb 2, 2021 | An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, ... |
| CVE-2020-25036 | HIGH | 8.8 | 2.0% | Feb 2, 2021 | UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, an... |
| CVE-2020-25037 | HIGH | 8.2 | 0.5% | Feb 2, 2021 | UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted ... |
| CVE-2020-20290 | HIGH | 7.5 | 1.3% | Feb 1, 2021 | Directory traversal vulnerability in the yccms 3.3 project. The delete, deletesite, and deleteAll functions' improper ju... |
| CVE-2020-28426 | HIGH | 7.3 | 1.9% | Feb 1, 2021 | All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId. |
| CVE-2020-24271 | HIGH | 8.8 | 0.6% | Feb 1, 2021 | A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/in... |
| CVE-2020-15834 | HIGH | 7.5 | 1.1% | Feb 1, 2021 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in ... |
| CVE-2020-15832 | HIGH | 7.5 | 1.1% | Feb 1, 2021 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented co... |
| CVE-2020-13860 | HIGH | 7.5 | 1.1% | Feb 1, 2021 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the undo... |
| CVE-2020-13857 | HIGH | 7.5 | 1.1% | Feb 1, 2021 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sendin... |
| CVE-2020-13856 | HIGH | 7.5 | 1.2% | Feb 1, 2021 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download t... |
| CVE-2020-14418 | HIGH | 7 | 0.3% | Jan 30, 2021 | A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges t... |
| CVE-2020-35145 | HIGH | 7.8 | 0.6% | Jan 29, 2021 | Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerab... |
| CVE-2020-29005 | HIGH | 7.5 | 0.7% | Jan 29, 2021 | The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential ... |
| CVE-2020-29004 | HIGH | 8.8 | 0.7% | Jan 29, 2021 | The API in the Push extension for MediaWiki through 1.35 did not require an edit token in ApiPushBase.php and therefore ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now