2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35841 | HIGH | 7.6 | 0.6% | Dec 30, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v... |
| CVE-2020-35839 | HIGH | 8.1 | 0.7% | Dec 30, 2020 | Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-35831 | HIGH | 8.1 | 0.9% | Dec 30, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-35802 | HIGH | 7.5 | 1.1% | Dec 30, 2020 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.14, RBW30 b... |
| CVE-2020-35801 | HIGH | 7.3 | 1.7% | Dec 30, 2020 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0... |
| CVE-2020-35798 | HIGH | 7.8 | 0.8% | Dec 30, 2020 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.... |
| CVE-2020-35789 | HIGH | 8.8 | 2.7% | Dec 30, 2020 | NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user. |
| CVE-2020-35787 | HIGH | 8 | 0.5% | Dec 30, 2020 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, ... |
| CVE-2020-35785 | HIGH | 8.8 | 0.7% | Dec 30, 2020 | NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-202... |
| CVE-2020-35784 | HIGH | 7.2 | 0.8% | Dec 30, 2020 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0... |
| CVE-2020-35782 | HIGH | 8.1 | 1.6% | Dec 30, 2020 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0... |
| CVE-2020-35779 | HIGH | 8.6 | 0.9% | Dec 30, 2020 | NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. |
| CVE-2020-35778 | HIGH | 8.8 | 0.4% | Dec 30, 2020 | Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36. |
| CVE-2020-35777 | HIGH | 8.4 | 0.8% | Dec 30, 2020 | NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection. |
| CVE-2020-10209 | HIGH | 8.1 | 2.7% | Dec 30, 2020 | Command Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications AK45x series, AK5xx ser... |
| CVE-2020-27645 | HIGH | 8.8 | 1.2% | Dec 29, 2020 | The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\... |
| CVE-2020-27644 | HIGH | 8.8 | 1.2% | Dec 29, 2020 | The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\... |
| CVE-2020-16268 | HIGH | 8.8 | 1.3% | Dec 29, 2020 | The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevate... |
| CVE-2020-9223 | HIGH | 7.5 | 0.9% | Dec 29, 2020 | There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnorm... |
| CVE-2020-9207 | HIGH | 7.8 | 0.6% | Dec 29, 2020 | There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not veri... |
| CVE-2020-9124 | HIGH | 7.5 | 0.9% | Dec 29, 2020 | There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker... |
| CVE-2020-9094 | HIGH | 7.5 | 0.7% | Dec 29, 2020 | There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with ... |
| CVE-2020-35773 | HIGH | 8.8 | 1.0% | Dec 29, 2020 | The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF. |
| CVE-2020-5807 | HIGH | 7.5 | 33.8% | Dec 29, 2020 | An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the Factor... |
| CVE-2020-5802 | HIGH | 7.5 | 38.8% | Dec 29, 2020 | An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a special... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now