2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27542 | MEDIUM | 6.8 | 1.2% | Jan 26, 2021 | Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection. The camera reads configuration from QR code (inclu... |
| CVE-2020-27298 | MEDIUM | 6.5 | 0.8% | Jan 26, 2021 | Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Ste... |
| CVE-2020-27098 | MEDIUM | 5.5 | 0.1% | Jan 26, 2021 | In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissi... |
| CVE-2020-27097 | MEDIUM | 5.5 | 0.1% | Jan 26, 2021 | In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass. This could lead to l... |
| CVE-2020-26941 | MEDIUM | 5.5 | 0.3% | Jan 26, 2021 | A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwr... |
| CVE-2020-24085 | MEDIUM | 6.1 | 0.8% | Jan 26, 2021 | A cross-site scripting (XSS) vulnerability exists in MISP v2.4.128 in app/Controller/UserSettingsController.php at SetHo... |
| CVE-2020-23447 | MEDIUM | 6.1 | 0.7% | Jan 26, 2021 | newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their a... |
| CVE-2020-23161 | MEDIUM | 6.5 | 2.4% | Jan 26, 2021 | Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to ... |
| CVE-2020-23014 | MEDIUM | 5.4 | 0.6% | Jan 26, 2021 | APfell 1.4 is vulnerable to authenticated reflected cross-site scripting (XSS) in /apiui/command_ through the payloadtyp... |
| CVE-2020-21147 | MEDIUM | 4.8 | 0.6% | Jan 26, 2021 | RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious ... |
| CVE-2020-21146 | MEDIUM | 6.1 | 0.6% | Jan 26, 2021 | Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript ... |
| CVE-2020-17522 | MEDIUM | 5.8 | 3.9% | Jan 26, 2021 | When ORT (now via atstccfg) generates ip_allow.config files in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0,... |
| CVE-2020-12514 | MEDIUM | 4.9 | 1.0% | Jan 22, 2021 | Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a ... |
| CVE-2020-12512 | MEDIUM | 5.4 | 0.7% | Jan 22, 2021 | Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site ... |
| CVE-2020-28487 | MEDIUM | 6.8 | 1.4% | Jan 22, 2021 | This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline elem... |
| CVE-2020-8569 | MEDIUM | 6.5 | 2.3% | Jan 21, 2021 | Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resour... |
| CVE-2020-8568 | MEDIUM | 6.5 | 1.3% | Jan 21, 2021 | Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassP... |
| CVE-2020-8567 | MEDIUM | 6.5 | 1.4% | Jan 21, 2021 | Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to... |
| CVE-2020-8554 | MEDIUM | 5 | 9.3% | Jan 21, 2021 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter... |
| CVE-2020-4969 | MEDIUM | 5.9 | 0.7% | Jan 21, 2021 | IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, c... |
| CVE-2020-4968 | MEDIUM | 6.5 | 0.3% | Jan 21, 2021 | IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could al... |
| CVE-2020-4966 | MEDIUM | 4.3 | 1.4% | Jan 21, 2021 | IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or ses... |
| CVE-2020-3687 | MEDIUM | 5.5 | 0.2% | Jan 21, 2021 | Local privilege escalation in admin services in Windows environment can occur due to an arbitrary read issue. |
| CVE-2020-11183 | MEDIUM | 6.7 | 0.2% | Jan 21, 2021 | A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code... |
| CVE-2020-11152 | MEDIUM | 6.4 | 0.1% | Jan 21, 2021 | Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now