2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-29540 | HIGH | 7.5 | 1.2% | Dec 8, 2020 | API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Syst... |
| CVE-2020-25692 | HIGH | 7.5 | 2.2% | Dec 8, 2020 | A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming ... |
| CVE-2020-25630 | HIGH | 7.5 | 1.3% | Dec 8, 2020 | A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quot... |
| CVE-2020-25629 | HIGH | 8.8 | 1.3% | Dec 8, 2020 | A vulnerability was found in Moodle where users with "Log in as" capability in a course context (typically, course manag... |
| CVE-2020-29599 | HIGH | 7.8 | 7.0% | Dec 7, 2020 | ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a passwo... |
| CVE-2020-26122 | HIGH | 7.2 | 1.2% | Dec 7, 2020 | Inspur NF5266M5 through 3.21.2 and other server M5 devices allow remote code execution via administrator privileges. The... |
| CVE-2020-27151 | HIGH | 8.8 | 2.0% | Dec 7, 2020 | An issue was discovered in Kata Containers through 1.11.3 and 2.x through 2.0-rc1. The runtime will execute binaries giv... |
| CVE-2020-9247 | HIGH | 7.8 | 0.8% | Dec 7, 2020 | There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain c... |
| CVE-2020-5798 | HIGH | 7.8 | 0.3% | Dec 7, 2020 | inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user fr... |
| CVE-2020-29573 | HIGH | 7.5 | 2.7% | Dec 6, 2020 | sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer ov... |
| CVE-2020-28950 | HIGH | 7.8 | 0.5% | Dec 4, 2020 | The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attac... |
| CVE-2020-25465 | HIGH | 7.5 | 1.6% | Dec 4, 2020 | Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK bef... |
| CVE-2020-25464 | HIGH | 7.5 | 1.1% | Dec 4, 2020 | Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is onl... |
| CVE-2020-25463 | HIGH | 7.5 | 1.3% | Dec 4, 2020 | Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a den... |
| CVE-2020-25461 | HIGH | 7.5 | 1.3% | Dec 4, 2020 | Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 cau... |
| CVE-2020-27408 | HIGH | 7.5 | 1.7% | Dec 4, 2020 | OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow... |
| CVE-2020-27766 | HIGH | 7.8 | 1.2% | Dec 4, 2020 | A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by I... |
| CVE-2020-5675 | HIGH | 7.5 | 2.8% | Dec 4, 2020 | Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39... |
| CVE-2020-26248 | HIGH | 8.2 | 12.4% | Dec 3, 2020 | In the PrestaShop module "productcomments" before version 4.2.1, an attacker can use a Blind SQL injection to retrieve d... |
| CVE-2020-29534 | HIGH | 7.8 | 0.5% | Dec 3, 2020 | An issue was discovered in the Linux kernel before 5.9.3. io_uring takes a non-refcounted reference to the files_struct ... |
| CVE-2020-29529 | HIGH | 7.5 | 2.8% | Dec 3, 2020 | HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protec... |
| CVE-2020-23740 | HIGH | 7.8 | 0.3% | Dec 3, 2020 | In DriverGenius 9.61.5480.28 there is a local privilege escalation vulnerability in the driver wizard, attackers can use... |
| CVE-2020-17527 | HIGH | 7.5 | 24.6% | Dec 3, 2020 | While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 ... |
| CVE-2020-28175 | HIGH | 7.8 | 0.5% | Dec 3, 2020 | There is a local privilege escalation vulnerability in Alfredo Milani Comparetti SpeedFan 4.52. Attackers can use constr... |
| CVE-2020-13525 | HIGH | 8.8 | 1.7% | Dec 3, 2020 | The sort parameter in the download page /sysworkflow/en/neoclassic/reportTables/reportTables_Ajax is vulnerable to SQL i... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now