2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-29572 | MEDIUM | 6.1 | 0.8% | Dec 6, 2020 | app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment fi... |
| CVE-2020-25449 | MEDIUM | 4.8 | 1.1% | Dec 4, 2020 | Cross Site Scripting (XSS) vulnerability in Arachnys Cabot 0.11.12 can be exploited via the Address column. |
| CVE-2020-27409 | MEDIUM | 6.1 | 1.0% | Dec 4, 2020 | OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via... |
| CVE-2020-27770 | MEDIUM | 5.5 | 1.1% | Dec 4, 2020 | Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(),... |
| CVE-2020-29565 | MEDIUM | 6.1 | 1.4% | Dec 4, 2020 | An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and... |
| CVE-2020-29562 | MEDIUM | 4.8 | 1.5% | Dec 4, 2020 | The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irrev... |
| CVE-2020-28916 | MEDIUM | 5.5 | 0.7% | Dec 4, 2020 | hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address. |
| CVE-2020-29561 | MEDIUM | 5.5 | 0.6% | Dec 4, 2020 | An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case whe... |
| CVE-2020-27348 | MEDIUM | 6.8 | 0.7% | Dec 4, 2020 | In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a mali... |
| CVE-2020-16123 | MEDIUM | 4.7 | 0.3% | Dec 4, 2020 | An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a cl... |
| CVE-2020-23741 | MEDIUM | 5.5 | 0.3% | Dec 3, 2020 | In AnyView (network police) network monitoring software 4.6.0.1, there is a local denial of service vulnerability in Any... |
| CVE-2020-23738 | MEDIUM | 5.5 | 0.4% | Dec 3, 2020 | There is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174. Attackers can use a construct... |
| CVE-2020-23736 | MEDIUM | 5.5 | 0.4% | Dec 3, 2020 | There is a local denial of service vulnerability in DaDa accelerator 5.6.19.816,, attackers can use constructed programs... |
| CVE-2020-23727 | MEDIUM | 5.5 | 0.4% | Dec 3, 2020 | There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attac... |
| CVE-2020-23726 | MEDIUM | 5.5 | 0.3% | Dec 3, 2020 | There is a local denial of service vulnerability in Wise Care 365 5.5.4, attackers can cause computer crash (BSOD). |
| CVE-2020-13524 | MEDIUM | 5.5 | 0.8% | Dec 3, 2020 | An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD f... |
| CVE-2020-27783 | MEDIUM | 6.1 | 3.9% | Dec 3, 2020 | A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, ... |
| CVE-2020-27762 | MEDIUM | 5.5 | 1.1% | Dec 3, 2020 | A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick... |
| CVE-2020-27760 | MEDIUM | 5.5 | 1.4% | Dec 3, 2020 | In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero co... |
| CVE-2020-25711 | MEDIUM | 6.5 | 1.1% | Dec 3, 2020 | A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server... |
| CVE-2020-2323 | MEDIUM | 5.3 | 0.8% | Dec 3, 2020 | Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers w... |
| CVE-2020-28938 | MEDIUM | 5.4 | 0.5% | Dec 3, 2020 | OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application... |
| CVE-2020-14318 | MEDIUM | 4.3 | 1.5% | Dec 3, 2020 | A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to g... |
| CVE-2020-5679 | MEDIUM | 6.1 | 0.7% | Dec 3, 2020 | Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking atta... |
| CVE-2020-5678 | MEDIUM | 6.1 | 1.2% | Dec 3, 2020 | Stored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to inject arbitrary script... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now