2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5997 | — | — | — | Jun 11, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-5996 | — | — | — | Jun 11, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-5995 | — | — | — | Jun 11, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-5994 | — | — | — | Jun 11, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-5993 | — | — | — | Jun 11, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-13663 | HIGH | 8.8 | 0.7% | Jun 11, 2021 | Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-... |
| CVE-2020-5003 | CRITICAL | 9.1 | 1.8% | Jun 11, 2021 | IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing X... |
| CVE-2020-13688 | MEDIUM | 6.1 | 0.7% | Jun 11, 2021 | Cross-site scripting vulnerability in l Drupal Core allows an attacker could leverage the way that HTML is rendered for ... |
| CVE-2020-23323 | CRITICAL | 9.8 | 1.3% | Jun 10, 2021 | There is a heap-buffer-overflow at re-parser.c in re_parse_char_escape in JerryScript 2.2.0. |
| CVE-2020-23322 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context... |
| CVE-2020-23321 | CRITICAL | 9.8 | 1.3% | Jun 10, 2021 | There is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_unit_from_utf8 in JerryScript 2.2.0. |
| CVE-2020-23320 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in parser_parse_function_argume... |
| CVE-2020-23319 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || (CBC_STACK_ADJUST_BASE - (flags ... |
| CVE-2020-23314 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion 'block_found' failed at js-parser-statm.c:2003 parser_parse_try_statement_end in JerryScript 2.2.0... |
| CVE-2020-23313 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510 in scanner_literal_is_... |
| CVE-2020-23312 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c:2185 in parser_parse_sou... |
| CVE-2020-23311 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p-... |
| CVE-2020-23310 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in... |
| CVE-2020-23309 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in par... |
| CVE-2020-23308 | HIGH | 7.5 | 1.1% | Jun 10, 2021 | There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_ex... |
| CVE-2020-23306 | CRITICAL | 9.8 | 1.3% | Jun 10, 2021 | There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript 2.2.0. |
| CVE-2020-23303 | CRITICAL | 9.8 | 1.3% | Jun 10, 2021 | There is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_collect_empty in JerryScript 2.2.0. |
| CVE-2020-23302 | CRITICAL | 9.8 | 1.3% | Jun 10, 2021 | There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript 2.2.0 |
| CVE-2020-25467 | MEDIUM | 5.5 | 0.9% | Jun 10, 2021 | A null pointer dereference was discovered lzo_decompress_buf in stream.c in Irzip 0.621 which allows an attacker to caus... |
| CVE-2020-24671 | HIGH | 8.8 | 1.0% | Jun 10, 2021 | Trace Financial CRESTBridge <6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now