2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25198 | HIGH | 8.8 | 1.1% | Dec 23, 2020 | The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protection... |
| CVE-2020-25194 | HIGH | 8.8 | 1.0% | Dec 23, 2020 | The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, whi... |
| CVE-2020-25153 | HIGH | 7.5 | 1.2% | Dec 23, 2020 | The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong... |
| CVE-2020-35657 | HIGH | 7.2 | 2.4% | Dec 23, 2020 | Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of UploadTheme t... |
| CVE-2020-35656 | HIGH | 7.2 | 2.4% | Dec 23, 2020 | Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of admin.php?req... |
| CVE-2020-28641 | HIGH | 7.1 | 0.8% | Dec 22, 2020 | In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the loca... |
| CVE-2020-27338 | HIGH | 7.1 | 0.8% | Dec 22, 2020 | An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows a... |
| CVE-2020-27337 | HIGH | 7.3 | 1.5% | Dec 22, 2020 | An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the IPv6 component allows an unauthe... |
| CVE-2020-24680 | HIGH | 7 | 0.3% | Dec 22, 2020 | In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stor... |
| CVE-2020-24678 | HIGH | 8.8 | 1.5% | Dec 22, 2020 | An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations ... |
| CVE-2020-24677 | HIGH | 8.8 | 1.3% | Dec 22, 2020 | Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privile... |
| CVE-2020-24676 | HIGH | 7.8 | 0.4% | Dec 22, 2020 | In Symphony Plus Operations and Symphony Plus Historian, some services can be vulnerable to privilege escalation attacks... |
| CVE-2020-24674 | HIGH | 8.8 | 2.9% | Dec 22, 2020 | In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected. Authenticated bu... |
| CVE-2020-35608 | HIGH | 7.8 | 4.0% | Dec 22, 2020 | A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Spher... |
| CVE-2020-14231 | HIGH | 8.8 | 1.0% | Dec 22, 2020 | A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an... |
| CVE-2020-24581 | HIGH | 8 | 12.6% | Dec 22, 2020 | An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_c... |
| CVE-2020-24580 | HIGH | 7.5 | 1.3% | Dec 22, 2020 | An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. Lack of authentication f... |
| CVE-2020-24579 | HIGH | 8.8 | 10.0% | Dec 22, 2020 | An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. An unauthenticated attac... |
| CVE-2020-13547 | HIGH | 8.8 | 2.8% | Dec 22, 2020 | A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.3752... |
| CVE-2020-25106 | HIGH | 7.8 | 1.5% | Dec 22, 2020 | Nanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager can be used to rename ... |
| CVE-2020-13570 | HIGH | 8.8 | 2.2% | Dec 22, 2020 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A s... |
| CVE-2020-13560 | HIGH | 8.8 | 2.9% | Dec 22, 2020 | A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.3752... |
| CVE-2020-13557 | HIGH | 8.8 | 70.9% | Dec 22, 2020 | A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.3752... |
| CVE-2020-29396 | HIGH | 8.8 | 3.2% | Dec 22, 2020 | A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3... |
| CVE-2020-28460 | HIGH | 8.1 | 1.5% | Dec 22, 2020 | This affects the package multi-ini before 2.1.2. It is possible to pollute an object's prototype by specifying the const... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now