2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25096 | HIGH | 8.8 | 1.0% | Dec 17, 2020 | LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different ro... |
| CVE-2020-25095 | HIGH | 8.8 | 1.0% | Dec 17, 2020 | LogRhythm Platform Manager (PM) 7.4.9 allows CSRF. The Web interface is vulnerable to Cross-site WebSocket Hijacking (CS... |
| CVE-2020-28931 | HIGH | 8.8 | 0.5% | Dec 16, 2020 | Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthen... |
| CVE-2020-26274 | HIGH | 8.8 | 2.7% | Dec 16, 2020 | In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fix... |
| CVE-2020-35133 | HIGH | 7.5 | 4.4% | Dec 16, 2020 | irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at i_view32... |
| CVE-2020-7837 | HIGH | 8.8 | 0.7% | Dec 16, 2020 | An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub_41EAF0 at MLReportD... |
| CVE-2020-5360 | HIGH | 7.5 | 2.2% | Dec 16, 2020 | Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthent... |
| CVE-2020-29607 | HIGH | 7.2 | 33.4% | Dec 16, 2020 | A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access... |
| CVE-2020-25622 | HIGH | 8.8 | 0.9% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF. |
| CVE-2020-25621 | HIGH | 8.4 | 0.5% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security... |
| CVE-2020-25620 | HIGH | 7.8 | 0.4% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accou... |
| CVE-2020-14254 | HIGH | 7.5 | 0.6% | Dec 16, 2020 | TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enab... |
| CVE-2020-29363 | HIGH | 7.5 | 3.5% | Dec 16, 2020 | An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC p... |
| CVE-2020-29361 | HIGH | 7.5 | 3.4% | Dec 16, 2020 | An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array ... |
| CVE-2020-25618 | HIGH | 8.8 | 2.6% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because ... |
| CVE-2020-25617 | HIGH | 8.8 | 3.2% | Dec 16, 2020 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Trave... |
| CVE-2020-28458 | HIGH | 7.3 | 3.7% | Dec 16, 2020 | All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.i... |
| CVE-2020-5683 | HIGH | 7.5 | 3.0% | Dec 16, 2020 | Directory traversal vulnerability in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1... |
| CVE-2020-5682 | HIGH | 7.5 | 2.0% | Dec 16, 2020 | Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series)... |
| CVE-2020-26258 | HIGH | 7.7 | 81.8% | Dec 16, 2020 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Fo... |
| CVE-2020-35122 | HIGH | 7.5 | 0.8% | Dec 15, 2020 | An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could by... |
| CVE-2020-35121 | HIGH | 8.8 | 1.0% | Dec 15, 2020 | An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could in... |
| CVE-2020-35381 | HIGH | 7.5 | 2.3% | Dec 15, 2020 | jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a G... |
| CVE-2020-35380 | HIGH | 7.5 | 1.7% | Dec 15, 2020 | GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON. |
| CVE-2020-28072 | HIGH | 7.2 | 2.6% | Dec 15, 2020 | A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker c... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now