2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9026 | CRITICAL | 9.8 | 3.1% | Feb 17, 2020 | ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NT... |
| CVE-2020-9025 | MEDIUM | 6.1 | 0.7% | Feb 17, 2020 | Iteris Vantage Velocity Field Unit 2.4.2 devices have multiple stored XSS issues in all parameters of the Start Data Vie... |
| CVE-2020-9024 | CRITICAL | 9.8 | 1.8% | Feb 17, 2020 | Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl (e... |
| CVE-2020-9023 | CRITICAL | 9.8 | 1.5% | Feb 17, 2020 | Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured wit... |
| CVE-2020-9022 | MEDIUM | 6.1 | 0.7% | Feb 17, 2020 | An issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices. The cgi-bin/ViewPage.cgi user parameter all... |
| CVE-2020-9021 | CRITICAL | 9.8 | 2.1% | Feb 17, 2020 | Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.... |
| CVE-2020-9020 | CRITICAL | 9.8 | 2.5% | Feb 17, 2020 | Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timecon... |
| CVE-2020-9034 | HIGH | 7.5 | 0.9% | Feb 17, 2020 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session vali... |
| CVE-2020-9016 | MEDIUM | 5.4 | 0.9% | Feb 16, 2020 | Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header. |
| CVE-2020-9013 | MEDIUM | 4.3 | 1.3% | Feb 16, 2020 | Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div id="watermark"> from the HT... |
| CVE-2020-9012 | MEDIUM | 6.1 | 0.8% | Feb 16, 2020 | A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows ... |
| CVE-2020-9007 | MEDIUM | 5.4 | 0.5% | Feb 16, 2020 | Codoforum 4.8.8 allows self-XSS via the title of a new topic. |
| CVE-2020-8997 | HIGH | 8.8 | 0.6% | Feb 16, 2020 | Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to ... |
| CVE-2020-8996 | MEDIUM | 4.3 | 1.1% | Feb 16, 2020 | AnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by the interface/downloadwi... |
| CVE-2020-7050 | MEDIUM | 5.4 | 0.5% | Feb 15, 2020 | Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to... |
| CVE-2020-8129 | CRITICAL | 9.8 | 2.9% | Feb 14, 2020 | An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execu... |
| CVE-2020-8128 | CRITICAL | 9.8 | 2.6% | Feb 14, 2020 | An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attack... |
| CVE-2020-6068 | HIGH | 8.8 | 3.6% | Feb 14, 2020 | An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG pngread parser of the Accusoft ImageGea... |
| CVE-2020-8594 | MEDIUM | 5.4 | 1.2% | Feb 14, 2020 | The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key],... |
| CVE-2020-8843 | HIGH | 7.4 | 1.1% | Feb 14, 2020 | An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically... |
| CVE-2020-8612 | CRITICAL | 9 | 1.7% | Feb 14, 2020 | In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API endpoint failed to adequately ... |
| CVE-2020-8858 | HIGH | 8.8 | 7.4% | Feb 14, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP... |
| CVE-2020-8857 | HIGH | 7.8 | 5.9% | Feb 14, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.294... |
| CVE-2020-8856 | HIGH | 7.8 | 19.4% | Feb 14, 2020 | This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.... |
| CVE-2020-8855 | HIGH | 7.8 | 5.9% | Feb 14, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now