2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-29367 | HIGH | 7.8 | 1.2% | Nov 27, 2020 | blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write ... |
| CVE-2020-28922 | HIGH | 8.8 | 0.7% | Nov 27, 2020 | An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL fun... |
| CVE-2020-28921 | HIGH | 8.8 | 0.6% | Nov 27, 2020 | An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL fun... |
| CVE-2020-25708 | HIGH | 7.5 | 1.6% | Nov 27, 2020 | A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a speci... |
| CVE-2020-10772 | HIGH | 7.5 | 1.3% | Nov 27, 2020 | An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020... |
| CVE-2020-7780 | HIGH | 8.8 | 0.6% | Nov 27, 2020 | This affects the package com.softwaremill.akka-http-session:core_2.13 before 0.5.11; the package com.softwaremill.akka-h... |
| CVE-2020-26936 | HIGH | 8.8 | 0.4% | Nov 26, 2020 | Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack. |
| CVE-2020-29043 | HIGH | 7.5 | 1.4% | Nov 26, 2020 | An issue was discovered in BigBlueButton through 2.2.29. When at attacker is able to view an account_activations/edit?to... |
| CVE-2020-27207 | HIGH | 7.5 | 1.6% | Nov 26, 2020 | Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite... |
| CVE-2020-7779 | HIGH | 7.5 | 1.7% | Nov 26, 2020 | All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted in... |
| CVE-2020-7778 | HIGH | 7.3 | 2.4% | Nov 26, 2020 | This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an ... |
| CVE-2020-27255 | HIGH | 7.5 | 3.2% | Nov 26, 2020 | A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a re... |
| CVE-2020-27253 | HIGH | 7.5 | 1.6% | Nov 26, 2020 | A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could ... |
| CVE-2020-29074 | HIGH | 8.8 | 1.7% | Nov 25, 2020 | scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user. |
| CVE-2020-14190 | HIGH | 7.5 | 1.2% | Nov 25, 2020 | Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-suppl... |
| CVE-2020-14191 | HIGH | 7.5 | 1.2% | Nov 25, 2020 | Affected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the application's availability via a De... |
| CVE-2020-26243 | HIGH | 7.5 | 2.6% | Nov 25, 2020 | Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding speci... |
| CVE-2020-26242 | HIGH | 7.5 | 1.5% | Nov 25, 2020 | Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.18, t... |
| CVE-2020-26241 | HIGH | 7.1 | 1.1% | Nov 25, 2020 | Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerabilit... |
| CVE-2020-26240 | HIGH | 7.5 | 1.6% | Nov 25, 2020 | Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation ... |
| CVE-2020-26238 | HIGH | 8.1 | 4.2% | Nov 25, 2020 | Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In c... |
| CVE-2020-26237 | HIGH | 8.7 | 1.3% | Nov 24, 2020 | Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerabl... |
| CVE-2020-29063 | HIGH | 7.5 | 0.5% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-29057 | HIGH | 7.5 | 1.9% | Nov 24, 2020 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716... |
| CVE-2020-25654 | HIGH | 7.2 | 2.0% | Nov 24, 2020 | An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group c... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now