2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25793 | HIGH | 7.5 | 1.6% | Sep 19, 2020 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is... |
| CVE-2020-25792 | HIGH | 7.5 | 2.8% | Sep 19, 2020 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is... |
| CVE-2020-25791 | HIGH | 7.5 | 1.7% | Sep 19, 2020 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is... |
| CVE-2020-25790 | HIGH | 7.2 | 15.6% | Sep 19, 2020 | Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archi... |
| CVE-2020-25788 | HIGH | 8.1 | 1.2% | Sep 19, 2020 | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mish... |
| CVE-2020-8253 | HIGH | 7.5 | 1.7% | Sep 18, 2020 | Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix Xe... |
| CVE-2020-8252 | HIGH | 7.8 | 0.7% | Sep 18, 2020 | The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined th... |
| CVE-2020-8251 | HIGH | 7.5 | 8.8% | Sep 18, 2020 | Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can m... |
| CVE-2020-8247 | HIGH | 8.8 | 1.4% | Sep 18, 2020 | Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix AD... |
| CVE-2020-8246 | HIGH | 7.5 | 1.6% | Sep 18, 2020 | Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix AD... |
| CVE-2020-8237 | HIGH | 7.5 | 1.7% | Sep 18, 2020 | Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack. |
| CVE-2020-8225 | HIGH | 7.5 | 0.9% | Sep 18, 2020 | A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies ... |
| CVE-2020-8201 | HIGH | 7.4 | 5.1% | Sep 18, 2020 | Node.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver malicious payloads to unsuspec... |
| CVE-2020-11861 | HIGH | 7.8 | 0.3% | Sep 18, 2020 | Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior t... |
| CVE-2020-3979 | HIGH | 7.8 | 0.4% | Sep 18, 2020 | InstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a predictable location at initia... |
| CVE-2020-25766 | HIGH | 7.5 | 1.2% | Sep 18, 2020 | An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form ... |
| CVE-2020-16247 | HIGH | 7.1 | 0.3% | Sep 18, 2020 | Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, p... |
| CVE-2020-15189 | HIGH | 7.2 | 2.8% | Sep 18, 2020 | SOY CMS 3.0.2 and earlier is affected by Remote Code Execution (RCE) using Unrestricted File Upload. Cross-Site Scriptin... |
| CVE-2020-14029 | HIGH | 7.5 | 1.4% | Sep 18, 2020 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The RSS To SMS module processes XML files in an unsafe m... |
| CVE-2020-0405 | HIGH | 7.8 | 0.1% | Sep 18, 2020 | In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead... |
| CVE-2020-0319 | HIGH | 7.8 | 0.4% | Sep 18, 2020 | In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr... |
| CVE-2020-0300 | HIGH | 7.5 | 0.8% | Sep 18, 2020 | In NFC, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosu... |
| CVE-2020-0299 | HIGH | 7.8 | 0.1% | Sep 18, 2020 | In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check. This could le... |
| CVE-2020-0298 | HIGH | 7.8 | 0.1% | Sep 18, 2020 | In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. This could lea... |
| CVE-2020-0286 | HIGH | 7.5 | 0.8% | Sep 18, 2020 | In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote informati... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now