2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28251 | HIGH | 8.1 | 1.2% | Dec 3, 2020 | NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be... |
| CVE-2020-27778 | HIGH | 7.5 | 2.2% | Dec 3, 2020 | A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this ... |
| CVE-2020-25693 | HIGH | 8.1 | 1.5% | Dec 3, 2020 | A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() ca... |
| CVE-2020-25649 | HIGH | 7.5 | 17.3% | Dec 3, 2020 | A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allow... |
| CVE-2020-23735 | HIGH | 7.8 | 0.3% | Dec 3, 2020 | In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constru... |
| CVE-2020-14381 | HIGH | 7.8 | 0.8% | Dec 3, 2020 | A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory ... |
| CVE-2020-14351 | HIGH | 7.8 | 0.3% | Dec 3, 2020 | A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local atta... |
| CVE-2020-14339 | HIGH | 8.8 | 0.4% | Dec 3, 2020 | A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This fil... |
| CVE-2020-13584 | HIGH | 8.8 | 4.4% | Dec 3, 2020 | An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web... |
| CVE-2020-13543 | HIGH | 8.8 | 3.3% | Dec 3, 2020 | A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web... |
| CVE-2020-13542 | HIGH | 7.8 | 0.6% | Dec 3, 2020 | A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depend... |
| CVE-2020-13531 | HIGH | 8.8 | 2.7% | Dec 3, 2020 | A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files. A specia... |
| CVE-2020-2324 | HIGH | 7.5 | 1.3% | Dec 3, 2020 | Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2020-2322 | HIGH | 7.5 | 1.3% | Dec 3, 2020 | Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attac... |
| CVE-2020-2321 | HIGH | 8.1 | 0.7% | Dec 3, 2020 | A cross-site request forgery (CSRF) vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to s... |
| CVE-2020-28939 | HIGH | 7.2 | 1.7% | Dec 3, 2020 | OpenClinic version 0.8.2 is affected by a medical/test_new.php insecure file upload vulnerability. This vulnerability al... |
| CVE-2020-28937 | HIGH | 7.5 | 1.3% | Dec 3, 2020 | OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to acce... |
| CVE-2020-6021 | HIGH | 7.8 | 0.3% | Dec 3, 2020 | Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which t... |
| CVE-2020-6111 | HIGH | 7.5 | 4.6% | Dec 3, 2020 | An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Program... |
| CVE-2020-5680 | HIGH | 7.5 | 1.4% | Dec 3, 2020 | Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a den... |
| CVE-2020-5676 | HIGH | 7.5 | 1.8% | Dec 3, 2020 | GROWI v4.1.3 and earlier allow remote attackers to obtain information which is not allowed to access via unspecified vec... |
| CVE-2020-13493 | HIGH | 7.8 | 1.3% | Dec 2, 2020 | A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f... |
| CVE-2020-25638 | HIGH | 7.4 | 2.9% | Dec 2, 2020 | A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementatio... |
| CVE-2020-12524 | HIGH | 7.5 | 1.1% | Dec 2, 2020 | Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W ... |
| CVE-2020-29458 | HIGH | 8.8 | 0.7% | Dec 2, 2020 | Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now