2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-18913 | HIGH | 7.5 | 1.3% | Aug 24, 2021 | EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via th... |
| CVE-2020-18778 | MEDIUM | 6.5 | 0.9% | Aug 23, 2021 | In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c that allows an attacker to... |
| CVE-2020-18776 | MEDIUM | 6.5 | 0.9% | Aug 23, 2021 | In Libav 12.3, there is a segmentation fault in vc1_decode_b_mb_intfr in vc1_block.c that allows an attacker to cause de... |
| CVE-2020-18775 | MEDIUM | 6.5 | 0.9% | Aug 23, 2021 | In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_b_mb_intfi in vc1_block.c that allows an attacker to... |
| CVE-2020-18774 | MEDIUM | 6.5 | 1.3% | Aug 23, 2021 | A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial ... |
| CVE-2020-18773 | MEDIUM | 6.5 | 1.3% | Aug 23, 2021 | An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of ser... |
| CVE-2020-18771 | HIGH | 8.1 | 1.8% | Aug 23, 2021 | Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which ... |
| CVE-2020-18735 | HIGH | 7.5 | 1.9% | Aug 23, 2021 | A heap buffer overflow in /src/dds_stream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server t... |
| CVE-2020-18734 | HIGH | 7.5 | 1.9% | Aug 23, 2021 | A stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server t... |
| CVE-2020-18731 | HIGH | 7.5 | 1.4% | Aug 23, 2021 | A segmentation violation in the Iec104_Deal_FirmUpdate function of IEC104 v1.0 allows attackers to cause a denial of ser... |
| CVE-2020-18730 | HIGH | 7.5 | 1.4% | Aug 23, 2021 | A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a denial of service (DOS... |
| CVE-2020-36478 | HIGH | 7.5 | 1.1% | Aug 23, 2021 | An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parame... |
| CVE-2020-36477 | MEDIUM | 5.9 | 0.8% | Aug 23, 2021 | An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected com... |
| CVE-2020-36476 | HIGH | 7.5 | 1.4% | Aug 23, 2021 | An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroiz... |
| CVE-2020-36475 | HIGH | 7.5 | 1.8% | Aug 23, 2021 | An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations perfor... |
| CVE-2020-24130 | HIGH | 8.1 | 0.4% | Aug 20, 2021 | A cross site request forgery (CSRF) vulnerability in the configure.html component of Ponzu 0.11.0 allows attackers to ch... |
| CVE-2020-27466 | HIGH | 7.8 | 1.9% | Aug 20, 2021 | An arbitrary file write vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php of rConfig 3.9.6 allows attackers to exec... |
| CVE-2020-27464 | HIGH | 7.8 | 2.5% | Aug 20, 2021 | An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrar... |
| CVE-2020-27461 | HIGH | 8.8 | 3.7% | Aug 20, 2021 | A remote code execution vulnerability in SEOPanel 4.6.0 has been fixed for 4.7.0. This vulnerability allowed for remote ... |
| CVE-2020-25359 | CRITICAL | 9.1 | 2.3% | Aug 20, 2021 | An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability gave attackers th... |
| CVE-2020-25353 | MEDIUM | 6.5 | 1.0% | Aug 20, 2021 | A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability allowed... |
| CVE-2020-25352 | MEDIUM | 5.4 | 2.0% | Aug 20, 2021 | A stored cross-site scripting (XSS) vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for versio... |
| CVE-2020-25351 | MEDIUM | 6.5 | 1.1% | Aug 20, 2021 | An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed re... |
| CVE-2020-36474 | CRITICAL | 9.8 | 1.8% | Aug 20, 2021 | SafeCurl before 0.9.2 has a DNS rebinding vulnerability. |
| CVE-2020-18886 | HIGH | 7.2 | 1.8% | Aug 20, 2021 | Unrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the component 'admin/up... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now