2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8091 | MEDIUM | 6.1 | 5.2% | Jan 27, 2020 | svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cr... |
| CVE-2020-8090 | MEDIUM | 4.8 | 0.6% | Jan 27, 2020 | The Username field in the Storage Service settings of A1 WLAN Box ADB VV2220v2 devices allows stored XSS (after a succes... |
| CVE-2020-5220 | MEDIUM | 5.3 | 0.7% | Jan 27, 2020 | Sylius ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data ... |
| CVE-2020-5218 | MEDIUM | 4.3 | 0.6% | Jan 27, 2020 | Affected versions of Sylius give attackers the ability to switch channels via the _channel_code GET parameter in product... |
| CVE-2020-8088 | CRITICAL | 9.8 | 1.4% | Jan 27, 2020 | panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password has... |
| CVE-2020-8087 | CRITICAL | 9.8 | 6.3% | Jan 27, 2020 | SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by leveraging access to the Network D... |
| CVE-2020-5207 | HIGH | 7.5 | 0.8% | Jan 27, 2020 | In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and T... |
| CVE-2020-7952 | HIGH | 7.8 | 1.9% | Jan 27, 2020 | rendersystemdx9.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service ... |
| CVE-2020-7951 | HIGH | 7.8 | 1.9% | Jan 27, 2020 | meshsystem.dll in Valve Dota 2 before 7.23e allows remote attackers to achieve code execution or denial of service by cr... |
| CVE-2020-7950 | HIGH | 7.8 | 1.9% | Jan 27, 2020 | meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by cr... |
| CVE-2020-7949 | HIGH | 7.8 | 4.2% | Jan 27, 2020 | schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by ... |
| CVE-2020-7238 | HIGH | 7.5 | 3.6% | Jan 27, 2020 | Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Tr... |
| CVE-2020-8009 | HIGH | 7.5 | 1.7% | Jan 27, 2020 | AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file. |
| CVE-2020-5522 | HIGH | 7.4 | 0.5% | Jan 27, 2020 | The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-... |
| CVE-2020-5521 | HIGH | 7.4 | 0.5% | Jan 27, 2020 | The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-t... |
| CVE-2020-5520 | HIGH | 7.4 | 0.5% | Jan 27, 2020 | The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-midd... |
| CVE-2020-8003 | MEDIUM | 5.5 | 0.3% | Jan 27, 2020 | A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of ser... |
| CVE-2020-8002 | MEDIUM | 5.5 | 0.3% | Jan 27, 2020 | A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of serv... |
| CVE-2020-8001 | CRITICAL | 9.8 | 1.6% | Jan 27, 2020 | The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account. |
| CVE-2020-8000 | CRITICAL | 9.8 | 2.4% | Jan 27, 2020 | Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account. |
| CVE-2020-7999 | CRITICAL | 9.8 | 1.3% | Jan 27, 2020 | The Intellian Aptus application 1.0.2 for Android has hardcoded values for DOWNLOAD_API_KEY and FILE_DOWNLOAD_API_KEY. |
| CVE-2020-7996 | MEDIUM | 6.1 | 1.2% | Jan 26, 2020 | htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header. |
| CVE-2020-7995 | CRITICAL | 9.8 | 4.5% | Jan 26, 2020 | The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attem... |
| CVE-2020-7994 | MEDIUM | 6.1 | 1.5% | Jan 26, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web sc... |
| CVE-2020-7991 | HIGH | 8.8 | 3.1% | Jan 26, 2020 | Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now