2020 CVE Vulnerabilities

21,069 CVEs published in 2020.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2020-19186MEDIUM6.5Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers ...
CVE-2020-19185MEDIUM6.5Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attack...
CVE-2020-18839MEDIUM6.5Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service.
CVE-2020-18781MEDIUM5.5Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a c...
CVE-2020-18780MEDIUM5.5A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial...
CVE-2020-18770MEDIUM5.5An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a...
CVE-2020-18768MEDIUM5.5There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause ...
CVE-2020-18652MEDIUM6.5Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial ...
CVE-2020-18651MEDIUM6.5Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remo...
CVE-2020-18382MEDIUM6.5Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38....
CVE-2020-18378MEDIUM6.5A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38....
CVE-2020-36024MEDIUM5.5An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (Do...
CVE-2020-36023MEDIUM6.5An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (Do...
CVE-2020-35990MEDIUM5.5Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader ver...
CVE-2020-28849MEDIUM5.4Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code an...
CVE-2020-28717MEDIUM6.1Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows...
CVE-2020-27449MEDIUM6.1Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001...
CVE-2020-25915MEDIUM5.4Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute ar...
CVE-2020-24904MEDIUM6.5An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive info...
CVE-2020-24872MEDIUM6.1Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attacker...
CVE-2020-24804MEDIUM6.5Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information ...
CVE-2020-24221MEDIUM5.5An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of...
CVE-2020-24187MEDIUM5.5An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of serv...
CVE-2020-24075MEDIUM6.1Cross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows...
CVE-2020-20523MEDIUM6.1Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3, allows remote attackers to ex...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now