2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-19720 | MEDIUM | 6.5 | 1.0% | Jul 13, 2021 | An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, lea... |
| CVE-2020-19719 | MEDIUM | 6.5 | 5.7% | Jul 13, 2021 | A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service (DOS). |
| CVE-2020-19718 | MEDIUM | 6.5 | 1.0% | Jul 13, 2021 | An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading... |
| CVE-2020-19717 | MEDIUM | 6.5 | 1.0% | Jul 13, 2021 | An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, lea... |
| CVE-2020-19716 | MEDIUM | 6.5 | 1.1% | Jul 13, 2021 | A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS)... |
| CVE-2020-19715 | — | — | — | Jul 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-13110 Reason: This candidate is a duplicate of C... |
| CVE-2020-20252 | MEDIUM | 6.5 | 1.6% | Jul 13, 2021 | Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat pro... |
| CVE-2020-22907 | HIGH | 7.5 | 1.6% | Jul 13, 2021 | Stack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18, allows remote attackers to cause a Den... |
| CVE-2020-22886 | HIGH | 7.5 | 1.6% | Jul 13, 2021 | Buffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to caus... |
| CVE-2020-22885 | HIGH | 7.5 | 1.6% | Jul 13, 2021 | Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to... |
| CVE-2020-22884 | CRITICAL | 9.8 | 2.8% | Jul 13, 2021 | Buffer overflow vulnerability in function jsvGetStringChars in Espruino before RELEASE_2V09, allows remote attackers to ... |
| CVE-2020-22882 | HIGH | 7.5 | 1.2% | Jul 13, 2021 | Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via a crafted... |
| CVE-2020-22876 | HIGH | 7.5 | 1.6% | Jul 13, 2021 | Buffer Overflow vulnerability in quickjs.c in QuickJS, allows remote attackers to cause denial of service. This issue is... |
| CVE-2020-22875 | CRITICAL | 9.8 | 3.3% | Jul 13, 2021 | Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute ar... |
| CVE-2020-22874 | CRITICAL | 9.8 | 3.3% | Jul 13, 2021 | Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute a... |
| CVE-2020-22873 | CRITICAL | 9.8 | 2.3% | Jul 13, 2021 | Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute... |
| CVE-2020-20250 | MEDIUM | 6.5 | 1.7% | Jul 13, 2021 | Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat pro... |
| CVE-2020-28400 | HIGH | 7.5 | 1.9% | Jul 13, 2021 | Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service conditio... |
| CVE-2020-26153 | MEDIUM | 6.1 | 3.8% | Jul 13, 2021 | A cross-site scripting (XSS) vulnerability in wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/... |
| CVE-2020-11307 | CRITICAL | 9.8 | 0.9% | Jul 13, 2021 | Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute... |
| CVE-2020-19907 | HIGH | 8.8 | 3.0% | Jul 12, 2021 | A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to e... |
| CVE-2020-18544 | CRITICAL | 9.8 | 2.3% | Jul 12, 2021 | SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the componen... |
| CVE-2020-23079 | HIGH | 7.5 | 1.2% | Jul 12, 2021 | SSRF vulnerability in Halo <=1.3.2 exists in the SMTP configuration, which can detect the server intranet. |
| CVE-2020-19038 | CRITICAL | 9.1 | 1.2% | Jul 12, 2021 | File Deletion vulnerability in Halo 0.4.3 via delBackup. |
| CVE-2020-19037 | MEDIUM | 5.3 | 0.9% | Jul 12, 2021 | Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now