2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27284 | HIGH | 7.8 | 1.2% | Jan 26, 2021 | TPEditor (v1.98 and prior) is vulnerable to two out-of-bounds write instances in the way it processes project files, all... |
| CVE-2020-27280 | HIGH | 7.8 | 1.3% | Jan 26, 2021 | A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an atta... |
| CVE-2020-25737 | HIGH | 7.8 | 0.3% | Jan 26, 2021 | An elevation of privilege vulnerability exists in Hackolade versions prior 4.2.0 on Windows has an issue in specific dep... |
| CVE-2020-25173 | HIGH | 7.8 | 0.3% | Jan 26, 2021 | An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reol... |
| CVE-2020-25169 | HIGH | 7.5 | 1.0% | Jan 26, 2021 | The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink serv... |
| CVE-2020-24549 | HIGH | 8.8 | 2.6% | Jan 26, 2021 | openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server. |
| CVE-2020-23826 | HIGH | 8.8 | 12.6% | Jan 26, 2021 | The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection vi... |
| CVE-2020-23449 | HIGH | 7.5 | 0.9% | Jan 26, 2021 | newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexCon... |
| CVE-2020-23162 | HIGH | 7.5 | 1.2% | Jan 26, 2021 | Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows re... |
| CVE-2020-23160 | HIGH | 8.8 | 6.9% | Jan 26, 2021 | Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to... |
| CVE-2020-22643 | HIGH | 7.2 | 1.9% | Jan 26, 2021 | Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. A... |
| CVE-2020-16236 | HIGH | 7.8 | 1.2% | Jan 26, 2021 | FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, whi... |
| CVE-2020-0236 | HIGH | 7.5 | 0.8% | Jan 26, 2021 | In A2DP_GetCodecType of a2dp_codec_config, there is a possible out-of-bounds read due to improper input validation. This... |
| CVE-2020-4949 | HIGH | 8.2 | 4.8% | Jan 26, 2021 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack w... |
| CVE-2020-17532 | HIGH | 8.8 | 3.2% | Jan 25, 2021 | When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause ... |
| CVE-2020-12525 | HIGH | 7.8 | 1.3% | Jan 22, 2021 | M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deser... |
| CVE-2020-12513 | HIGH | 8.8 | 31.1% | Jan 22, 2021 | Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection... |
| CVE-2020-12511 | HIGH | 8.8 | 0.6% | Jan 22, 2021 | Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the ... |
| CVE-2020-4766 | HIGH | 7.5 | 1.5% | Jan 22, 2021 | IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ dat... |
| CVE-2020-26295 | HIGH | 7.2 | 1.8% | Jan 21, 2021 | OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrat... |
| CVE-2020-26285 | HIGH | 7.2 | 2.9% | Jan 21, 2021 | OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, there is a vul... |
| CVE-2020-3685 | HIGH | 7.5 | 0.9% | Jan 21, 2021 | Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdra... |
| CVE-2020-11217 | HIGH | 7.8 | 0.2% | Jan 21, 2021 | A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdrago... |
| CVE-2020-11214 | HIGH | 7.5 | 0.8% | Jan 21, 2021 | Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it a... |
| CVE-2020-11200 | HIGH | 7.5 | 0.8% | Jan 21, 2021 | Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapdr... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now