2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36332 | HIGH | 7.5 | 2.0% | May 21, 2021 | A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memor... |
| CVE-2020-36331 | CRITICAL | 9.1 | 2.3% | May 21, 2021 | A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The h... |
| CVE-2020-36330 | CRITICAL | 9.1 | 2.2% | May 21, 2021 | A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. ... |
| CVE-2020-36329 | CRITICAL | 9.8 | 2.3% | May 21, 2021 | A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early.... |
| CVE-2020-36328 | CRITICAL | 9.8 | 2.7% | May 21, 2021 | A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is poss... |
| CVE-2020-27211 | MEDIUM | 5.7 | 0.3% | May 21, 2021 | Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The fl... |
| CVE-2020-27212 | HIGH | 7 | 0.3% | May 21, 2021 | STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP)... |
| CVE-2020-27208 | MEDIUM | 6.8 | 0.3% | May 21, 2021 | The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.... |
| CVE-2020-12061 | CRITICAL | 9.8 | 1.9% | May 21, 2021 | An issue was discovered in Nitrokey FIDO U2F firmware through 1.1. Communication between the microcontroller and the sec... |
| CVE-2020-27209 | HIGH | 7.5 | 1.5% | May 20, 2021 | The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversar... |
| CVE-2020-18220 | HIGH | 7.5 | 0.4% | May 20, 2021 | Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not... |
| CVE-2020-21345 | MEDIUM | 6.1 | 0.8% | May 20, 2021 | Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a rem... |
| CVE-2020-35580 | HIGH | 7.5 | 14.0% | May 20, 2021 | A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated us... |
| CVE-2020-21057 | HIGH | 8.1 | 1.5% | May 20, 2021 | Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the syst... |
| CVE-2020-21056 | MEDIUM | 4.3 | 1.0% | May 20, 2021 | Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via ... |
| CVE-2020-21055 | MEDIUM | 6.5 | 1.2% | May 20, 2021 | A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.vi... |
| CVE-2020-21054 | MEDIUM | 6.1 | 0.7% | May 20, 2021 | Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script... |
| CVE-2020-4850 | HIGH | 7.5 | 1.0% | May 20, 2021 | IBM Spectrum Scale 1.1.1.0 through 1.1.8.4 Transparent Cloud Tiering could allow a remote attacker to obtain sensitive i... |
| CVE-2020-21053 | MEDIUM | 6.1 | 0.7% | May 20, 2021 | Cross Site Scriptiong (XSS) vulnerability exists in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary we... |
| CVE-2020-24396 | HIGH | 7.5 | 1.8% | May 20, 2021 | homee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and unencrypted firmware ima... |
| CVE-2020-24395 | MEDIUM | 6.8 | 0.2% | May 20, 2021 | The USB firmware update script of homee Brain Cube v2 (2.28.2 and 2.28.4) devices allows an attacker with physical acces... |
| CVE-2020-15522 | MEDIUM | 5.9 | 1.5% | May 20, 2021 | Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 ha... |
| CVE-2020-4765 | LOW | 3.3 | 0.2% | May 19, 2021 | IBM Cloud Pak for Multicloud Management prior to 2.3 allows web pages to be stored locally which can be read by another ... |
| CVE-2020-4646 | MEDIUM | 4.3 | 0.7% | May 19, 2021 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0... |
| CVE-2020-36365 | MEDIUM | 6.1 | 2.6% | May 19, 2021 | Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now