2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7594 | HIGH | 7.2 | 2.5% | Jan 21, 2020 | MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitra... |
| CVE-2020-7040 | HIGH | 8.1 | 2.9% | Jan 21, 2020 | storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks tha... |
| CVE-2020-5498 | — | — | — | Jan 21, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-6638 | HIGH | 7.5 | 1.3% | Jan 21, 2020 | Grin through 2.1.1 has Insufficient Validation. |
| CVE-2020-6849 | HIGH | 8.8 | 1.3% | Jan 21, 2020 | The marketo-forms-and-tracking plugin through 1.0.2 for WordPress allows wp-admin/admin.php?page=marketo_fat CSRF with r... |
| CVE-2020-1840 | MEDIUM | 6 | 0.2% | Jan 21, 2020 | HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulner... |
| CVE-2020-5202 | MEDIUM | 5.5 | 0.5% | Jan 21, 2020 | apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /u... |
| CVE-2020-7229 | CRITICAL | 9.8 | 1.5% | Jan 21, 2020 | An issue was discovered in Simplejobscript.com SJS before 1.65. There is unauthenticated SQL injection via the search en... |
| CVE-2020-7213 | HIGH | 7.5 | 1.1% | Jan 21, 2020 | Parallels 13 uses cleartext HTTP as part of the update process, allowing man-in-the-middle attacks. Users of out-of-date... |
| CVE-2020-7211 | HIGH | 7.5 | 4.1% | Jan 21, 2020 | tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows. |
| CVE-2020-6857 | MEDIUM | 5.5 | 1.0% | Jan 21, 2020 | CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FT... |
| CVE-2020-7470 | MEDIUM | 4.8 | 0.6% | Jan 21, 2020 | Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successful login wi... |
| CVE-2020-7246 | HIGH | 8.8 | 83.2% | Jan 21, 2020 | A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code ... |
| CVE-2020-7239 | MEDIUM | 6.1 | 1.4% | Jan 21, 2020 | The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a cha... |
| CVE-2020-7249 | MEDIUM | 4.8 | 0.6% | Jan 21, 2020 | SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network Configuration page (after a success... |
| CVE-2020-7244 | HIGH | 7.2 | 4.2% | Jan 20, 2020 | Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by nav... |
| CVE-2020-7243 | HIGH | 7.2 | 4.2% | Jan 20, 2020 | Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by nav... |
| CVE-2020-7242 | HIGH | 7.2 | 4.4% | Jan 20, 2020 | Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by nav... |
| CVE-2020-7241 | HIGH | 7.5 | 2.4% | Jan 20, 2020 | The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/... |
| CVE-2020-7240 | HIGH | 8.8 | 2.4% | Jan 20, 2020 | Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS ... |
| CVE-2020-7215 | MEDIUM | 5.5 | 0.3% | Jan 20, 2020 | An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 befor... |
| CVE-2020-7237 | HIGH | 8.8 | 36.8% | Jan 20, 2020 | Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance Boost Debug L... |
| CVE-2020-7236 | MEDIUM | 6.1 | 0.7% | Jan 19, 2020 | UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= (Site Name field of the Site Setup section). |
| CVE-2020-7235 | MEDIUM | 6.1 | 0.7% | Jan 19, 2020 | UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= (profile title). |
| CVE-2020-7234 | MEDIUM | 4.8 | 0.6% | Jan 19, 2020 | Ruckus ZoneFlex R310 104.0.0.0.1347 devices allow Stored XSS via the SSID field on the Configuration > Radio 2.4G > Wire... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now