2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-20096 | MEDIUM | 6.5 | 1.4% | Mar 23, 2022 | Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to... |
| CVE-2020-20095 | MEDIUM | 6.5 | 1.3% | Mar 23, 2022 | iMessage (Messages app) iOS 12.4 and prior user interface does not properly represent URI messages to the user, which re... |
| CVE-2020-20094 | MEDIUM | 6.5 | 1.4% | Mar 23, 2022 | Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages t... |
| CVE-2020-20093 | MEDIUM | 6.5 | 2.3% | Mar 23, 2022 | The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly... |
| CVE-2020-24772 | HIGH | 8.8 | 0.6% | Mar 21, 2022 | In Dreamacro Clash for Windows v0.11.4, an attacker could embed a malicious iframe in a website with a crafted URL that ... |
| CVE-2020-26008 | HIGH | 7.8 | 0.9% | Mar 20, 2022 | The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file up... |
| CVE-2020-26007 | HIGH | 7.8 | 0.9% | Mar 20, 2022 | An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows attackers to execute arbitra... |
| CVE-2020-25197 | HIGH | 8.8 | 3.0% | Mar 18, 2022 | A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware v... |
| CVE-2020-25193 | MEDIUM | 5.3 | 0.8% | Mar 18, 2022 | By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions... |
| CVE-2020-25184 | MEDIUM | 5.5 | 0.4% | Mar 18, 2022 | Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same ... |
| CVE-2020-25182 | MEDIUM | 6.7 | 0.4% | Mar 18, 2022 | Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled ... |
| CVE-2020-25180 | MEDIUM | 6.5 | 1.1% | Mar 18, 2022 | Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is requir... |
| CVE-2020-25178 | HIGH | 8.8 | 1.6% | Mar 18, 2022 | ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP. This communic... |
| CVE-2020-25176 | CRITICAL | 9.8 | 6.1% | Mar 18, 2022 | Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol perform... |
| CVE-2020-16232 | CRITICAL | 9.8 | 0.7% | Mar 18, 2022 | In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project ... |
| CVE-2020-15388 | MEDIUM | 6.5 | 0.7% | Mar 18, 2022 | A vulnerability in the Brocade Fabric OS before Brocade Fabric OS v9.0.1a, v8.2.3, v8.2.0_CBN4, and v7.4.2h could allow ... |
| CVE-2020-15591 | CRITICAL | 9.8 | 3.8% | Mar 17, 2022 | fexsrv in F*EX (aka Frams' Fast File EXchange) before fex-20160919_2 allows eval injection (for unauthenticated remote c... |
| CVE-2020-25721 | HIGH | 8.8 | 2.0% | Mar 16, 2022 | Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Li... |
| CVE-2020-36519 | MEDIUM | 4.9 | 0.8% | Mar 16, 2022 | Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This o... |
| CVE-2020-4989 | MEDIUM | 4.3 | 0.7% | Mar 15, 2022 | IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow an... |
| CVE-2020-36518 | HIGH | 7.5 | 4.9% | Mar 11, 2022 | jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested o... |
| CVE-2020-36517 | HIGH | 7.5 | 2.9% | Mar 10, 2022 | An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS oper... |
| CVE-2020-36123 | — | — | — | Mar 10, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-14115 | CRITICAL | 9.8 | 1.1% | Mar 10, 2022 | A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspectio... |
| CVE-2020-14112 | MEDIUM | 5.3 | 0.7% | Mar 10, 2022 | Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing conf... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now