2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14409 | HIGH | 7.8 | 1.3% | Jan 19, 2021 | SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_... |
| CVE-2020-4881 | HIGH | 7.5 | 0.9% | Jan 19, 2021 | IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server h... |
| CVE-2020-27733 | HIGH | 8.8 | 8.8% | Jan 19, 2021 | Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmvi... |
| CVE-2020-28482 | HIGH | 8.8 | 1.0% | Jan 19, 2021 | This affects the package fastify-csrf before 3.0.0. 1. The generated cookie used insecure defaults, and did not have the... |
| CVE-2020-28479 | HIGH | 7.5 | 2.0% | Jan 19, 2021 | The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function. |
| CVE-2020-23342 | HIGH | 8.8 | 12.4% | Jan 19, 2021 | A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users. |
| CVE-2020-28478 | HIGH | 7.5 | 1.6% | Jan 19, 2021 | This affects the package gsap before 3.6.0. |
| CVE-2020-28477 | HIGH | 7.5 | 2.3% | Jan 19, 2021 | This affects all versions of package immer. |
| CVE-2020-36193 | HIGH | 7.5 | 70.6% | Jan 18, 2021 | Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of sym... |
| CVE-2020-25533 | HIGH | 7 | 0.3% | Jan 15, 2021 | An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged ac... |
| CVE-2020-24641 | HIGH | 7.5 | 1.5% | Jan 15, 2021 | In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated end... |
| CVE-2020-24638 | HIGH | 7.2 | 3.2% | Jan 15, 2021 | Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. Thes... |
| CVE-2020-35749 | HIGH | 7.7 | 30.5% | Jan 15, 2021 | Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2... |
| CVE-2020-35733 | HIGH | 7.5 | 1.2% | Jan 15, 2021 | An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certif... |
| CVE-2020-27220 | HIGH | 8.8 | 1.1% | Jan 14, 2021 | The Eclipse Hono AMQP and MQTT protocol adapters do not check whether an authenticated gateway device is authorized to r... |
| CVE-2020-6572 | HIGH | 8.8 | 10.6% | Jan 14, 2021 | Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a... |
| CVE-2020-29494 | HIGH | 8.7 | 1.7% | Jan 14, 2021 | Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could po... |
| CVE-2020-6776 | HIGH | 8.8 | 0.5% | Jan 14, 2021 | A vulnerability in the web-based management interface of Bosch PRAESIDEO until and including version 4.41 and Bosch PRAE... |
| CVE-2020-29018 | HIGH | 8.8 | 2.0% | Jan 14, 2021 | A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the co... |
| CVE-2020-29017 | HIGH | 8.8 | 3.6% | Jan 14, 2021 | An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to ... |
| CVE-2020-26732 | HIGH | 7.5 | 1.5% | Jan 14, 2021 | SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie ... |
| CVE-2020-16119 | HIGH | 7.8 | 0.4% | Jan 14, 2021 | Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an a... |
| CVE-2020-14102 | HIGH | 7.2 | 1.9% | Jan 13, 2021 | There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root priv... |
| CVE-2020-14101 | HIGH | 7.5 | 1.1% | Jan 13, 2021 | The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi rout... |
| CVE-2020-14098 | HIGH | 7.5 | 1.2% | Jan 13, 2021 | The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts.... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now