2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-22032 | HIGH | 8.8 | 1.8% | May 27, 2021 | A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which migh... |
| CVE-2020-22027 | HIGH | 8.8 | 1.5% | May 27, 2021 | A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might le... |
| CVE-2020-22025 | HIGH | 8.8 | 1.8% | May 27, 2021 | A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to m... |
| CVE-2020-22023 | HIGH | 8.8 | 1.4% | May 27, 2021 | A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, whic... |
| CVE-2020-22022 | HIGH | 8.8 | 1.7% | May 27, 2021 | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which mi... |
| CVE-2020-22017 | HIGH | 8.8 | 1.4% | May 27, 2021 | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which m... |
| CVE-2020-22016 | HIGH | 8.8 | 1.6% | May 27, 2021 | A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might l... |
| CVE-2020-12403 | CRITICAL | 9.1 | 1.5% | May 27, 2021 | A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chac... |
| CVE-2020-10774 | MEDIUM | 5.5 | 0.3% | May 27, 2021 | A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when rea... |
| CVE-2020-10729 | MEDIUM | 5.5 | 0.4% | May 27, 2021 | A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length g... |
| CVE-2020-10716 | MEDIUM | 6.5 | 0.8% | May 27, 2021 | A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the ... |
| CVE-2020-10709 | HIGH | 7.1 | 0.3% | May 27, 2021 | A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower use... |
| CVE-2020-10701 | MEDIUM | 6.5 | 0.9% | May 27, 2021 | A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response timeout. This... |
| CVE-2020-10698 | LOW | 3.3 | 0.3% | May 27, 2021 | A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the stdout of the executed j... |
| CVE-2020-10697 | MEDIUM | 4.4 | 0.2% | May 27, 2021 | A flaw was found in Ansible Tower when running Openshift. Tower runs a memcached, which is accessed via TCP. An attacker... |
| CVE-2020-10688 | MEDIUM | 6.1 | 1.4% | May 27, 2021 | A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it... |
| CVE-2020-22031 | HIGH | 8.8 | 1.7% | May 27, 2021 | A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, whic... |
| CVE-2020-22030 | HIGH | 8.8 | 1.2% | May 27, 2021 | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, whi... |
| CVE-2020-22029 | HIGH | 8.8 | 1.5% | May 27, 2021 | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivat... |
| CVE-2020-18230 | MEDIUM | 4.8 | 1.0% | May 27, 2021 | Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into... |
| CVE-2020-18229 | MEDIUM | 4.8 | 0.9% | May 27, 2021 | Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into... |
| CVE-2020-27832 | CRITICAL | 9 | 0.9% | May 27, 2021 | A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a r... |
| CVE-2020-17514 | HIGH | 7.4 | 3.4% | May 27, 2021 | Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. Un... |
| CVE-2020-27831 | MEDIUM | 4.3 | 0.5% | May 27, 2021 | A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addr... |
| CVE-2020-27839 | MEDIUM | 5.4 | 2.4% | May 26, 2021 | A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend appl... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now