2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-17504 | HIGH | 7.2 | 2.8% | Jan 8, 2021 | The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that w... |
| CVE-2020-17503 | HIGH | 7.2 | 2.8% | Jan 8, 2021 | The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that w... |
| CVE-2020-17502 | HIGH | 7.2 | 2.8% | Jan 8, 2021 | Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4). The NDN-210 has a web administration panel which i... |
| CVE-2020-5805 | HIGH | 8.8 | 0.9% | Jan 8, 2021 | In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml. OS-level users on ... |
| CVE-2020-5804 | HIGH | 8.1 | 1.7% | Jan 8, 2021 | Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of... |
| CVE-2020-24577 | HIGH | 7.5 | 19.1% | Jan 8, 2021 | An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch applicatio... |
| CVE-2020-36049 | HIGH | 7.5 | 2.6% | Jan 8, 2021 | socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet beca... |
| CVE-2020-36048 | HIGH | 7.5 | 3.3% | Jan 8, 2021 | Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the lo... |
| CVE-2020-13449 | HIGH | 7.5 | 4.9% | Jan 7, 2021 | A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any con... |
| CVE-2020-35745 | HIGH | 8.8 | 1.7% | Jan 7, 2021 | PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attac... |
| CVE-2020-6656 | HIGH | 7.8 | 2.7% | Jan 7, 2021 | Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vuln... |
| CVE-2020-6655 | HIGH | 7.8 | 2.7% | Jan 7, 2021 | The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability.... |
| CVE-2020-4898 | HIGH | 7.5 | 0.8% | Jan 7, 2021 | IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an a... |
| CVE-2020-13573 | HIGH | 7.5 | 3.4% | Jan 7, 2021 | A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2... |
| CVE-2020-28672 | HIGH | 7.2 | 11.7% | Jan 7, 2021 | MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/... |
| CVE-2020-26773 | HIGH | 8.8 | 1.6% | Jan 7, 2021 | Restaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability, which allows a remote, auth... |
| CVE-2020-35114 | HIGH | 8.8 | 1.0% | Jan 7, 2021 | Mozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed evidence of memory corru... |
| CVE-2020-35113 | HIGH | 8.8 | 1.3% | Jan 7, 2021 | Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evi... |
| CVE-2020-35112 | HIGH | 8.8 | 1.3% | Jan 7, 2021 | If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there wa... |
| CVE-2020-26974 | HIGH | 8.8 | 1.5% | Jan 7, 2021 | When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the wron... |
| CVE-2020-26973 | HIGH | 8.8 | 1.6% | Jan 7, 2021 | Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been us... |
| CVE-2020-26971 | HIGH | 8.8 | 1.9% | Jan 7, 2021 | Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video d... |
| CVE-2020-36183 | HIGH | 8.1 | 5.0% | Jan 7, 2021 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-36182 | HIGH | 8.1 | 5.0% | Jan 7, 2021 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-36180 | HIGH | 8.1 | 5.0% | Jan 7, 2021 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, rela... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now