2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-21844 | HIGH | 8.8 | 1.5% | May 17, 2021 | GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is... |
| CVE-2020-21843 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318. |
| CVE-2020-21842 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode... |
| CVE-2020-21831 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:... |
| CVE-2020-18198 | HIGH | 8.8 | 0.9% | May 17, 2021 | Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete speci... |
| CVE-2020-18195 | HIGH | 8.8 | 0.9% | May 17, 2021 | Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete a spe... |
| CVE-2020-18194 | MEDIUM | 6.1 | 1.5% | May 17, 2021 | Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script ... |
| CVE-2020-21841 | HIGH | 8.8 | 1.4% | May 17, 2021 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135. |
| CVE-2020-21840 | HIGH | 8.8 | 1.4% | May 17, 2021 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985. |
| CVE-2020-21839 | MEDIUM | 6.5 | 1.2% | May 17, 2021 | An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwg_decode_eed ../../src/deco... |
| CVE-2020-21838 | HIGH | 8.8 | 1.4% | May 17, 2021 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:... |
| CVE-2020-21836 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:... |
| CVE-2020-21835 | MEDIUM | 6.5 | 0.9% | May 17, 2021 | A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337. |
| CVE-2020-21834 | MEDIUM | 6.5 | 0.9% | May 17, 2021 | A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164. |
| CVE-2020-21833 | HIGH | 8.8 | 1.4% | May 17, 2021 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:... |
| CVE-2020-21832 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode... |
| CVE-2020-21830 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213. |
| CVE-2020-21827 | HIGH | 7.8 | 1.0% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode... |
| CVE-2020-29205 | MEDIUM | 6.1 | 1.5% | May 17, 2021 | XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via t... |
| CVE-2020-24993 | MEDIUM | 5.4 | 0.5% | May 17, 2021 | There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when visito... |
| CVE-2020-24992 | MEDIUM | 5.4 | 0.5% | May 17, 2021 | There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an adm... |
| CVE-2020-21819 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51. |
| CVE-2020-21818 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48. |
| CVE-2020-21817 | MEDIUM | 6.5 | 0.9% | May 17, 2021 | A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which cause... |
| CVE-2020-21816 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now