2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11115 | HIGH | 7.5 | 0.7% | Sep 8, 2020 | u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from be... |
| CVE-2020-24986 | HIGH | 7.2 | 2.0% | Sep 4, 2020 | Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File ... |
| CVE-2020-24659 | HIGH | 7.5 | 3.7% | Sep 4, 2020 | An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if ... |
| CVE-2020-14008 | HIGH | 7.2 | 35.5% | Sep 4, 2020 | Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in... |
| CVE-2020-4545 | HIGH | 7.8 | 3.0% | Sep 4, 2020 | IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loadi... |
| CVE-2020-23834 | HIGH | 7.8 | 0.5% | Sep 4, 2020 | Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to esca... |
| CVE-2020-12248 | HIGH | 8.8 | 1.8% | Sep 4, 2020 | In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a he... |
| CVE-2020-12247 | HIGH | 7.1 | 3.6% | Sep 4, 2020 | In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information fr... |
| CVE-2020-11493 | HIGH | 8.1 | 0.9% | Sep 4, 2020 | In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information ab... |
| CVE-2020-3530 | HIGH | 8.4 | 0.3% | Sep 4, 2020 | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticate... |
| CVE-2020-3495 | HIGH | 8.8 | 61.9% | Sep 4, 2020 | A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The... |
| CVE-2020-3478 | HIGH | 8.1 | 1.2% | Sep 4, 2020 | A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, re... |
| CVE-2020-3473 | HIGH | 7.8 | 0.4% | Sep 4, 2020 | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticate... |
| CVE-2020-3430 | HIGH | 8.8 | 3.9% | Sep 4, 2020 | A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated... |
| CVE-2020-24941 | HIGH | 7.5 | 1.1% | Sep 4, 2020 | An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some sit... |
| CVE-2020-24940 | HIGH | 7.5 | 1.2% | Sep 4, 2020 | An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in... |
| CVE-2020-24999 | HIGH | 7.8 | 1.1% | Sep 3, 2020 | There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by send... |
| CVE-2020-24996 | HIGH | 7.8 | 1.1% | Sep 3, 2020 | There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can ... |
| CVE-2020-1894 | HIGH | 8.8 | 1.8% | Sep 3, 2020 | A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, Whats... |
| CVE-2020-1890 | HIGH | 7.5 | 1.4% | Sep 3, 2020 | A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 coul... |
| CVE-2020-1886 | HIGH | 8.8 | 1.2% | Sep 3, 2020 | A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could hav... |
| CVE-2020-25125 | HIGH | 7.8 | 1.3% | Sep 3, 2020 | GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other imp... |
| CVE-2020-11579 | HIGH | 7.5 | 26.5% | Sep 3, 2020 | An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation ... |
| CVE-2020-24162 | HIGH | 7.8 | 0.4% | Sep 3, 2020 | The Shenzhen Tencent app 5.8.2.5300 for PC platforms (from Tencent App Center) has a DLL hijacking vulnerability. Attack... |
| CVE-2020-24161 | HIGH | 7.8 | 0.4% | Sep 3, 2020 | Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerabi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now