2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11285 | CRITICAL | 9.1 | 0.9% | May 7, 2021 | Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in S... |
| CVE-2020-11284 | HIGH | 7.8 | 0.2% | May 7, 2021 | Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the me... |
| CVE-2020-11279 | CRITICAL | 9.8 | 0.8% | May 7, 2021 | Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdra... |
| CVE-2020-11274 | HIGH | 7.5 | 0.7% | May 7, 2021 | Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon... |
| CVE-2020-11273 | HIGH | 7.5 | 0.7% | May 7, 2021 | Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null poi... |
| CVE-2020-11268 | HIGH | 7.5 | 0.7% | May 7, 2021 | Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of servi... |
| CVE-2020-11254 | MEDIUM | 5.5 | 0.1% | May 7, 2021 | Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid... |
| CVE-2020-29445 | MEDIUM | 4.3 | 1.2% | May 7, 2021 | Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify i... |
| CVE-2020-29444 | MEDIUM | 5.4 | 0.9% | May 7, 2021 | Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javasc... |
| CVE-2020-23264 | HIGH | 8.8 | 0.6% | May 6, 2021 | Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged... |
| CVE-2020-23263 | MEDIUM | 6.1 | 0.8% | May 6, 2021 | Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Java... |
| CVE-2020-28198 | HIGH | 7 | 0.4% | May 6, 2021 | The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 (Command Line Administrative Interface, dsmadmc.exe... |
| CVE-2020-18890 | CRITICAL | 9.8 | 1.5% | May 6, 2021 | Rmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote maliciou... |
| CVE-2020-18888 | HIGH | 7.5 | 0.8% | May 6, 2021 | Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /... |
| CVE-2020-18889 | MEDIUM | 6.5 | 0.5% | May 6, 2021 | Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/setting... |
| CVE-2020-35519 | HIGH | 7.8 | 0.4% | May 6, 2021 | An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc... |
| CVE-2020-28026 | CRITICAL | 9.8 | 9.3% | May 6, 2021 | Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable ... |
| CVE-2020-28025 | HIGH | 7.5 | 2.7% | May 6, 2021 | Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between ... |
| CVE-2020-28024 | CRITICAL | 9.8 | 4.1% | May 6, 2021 | Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary co... |
| CVE-2020-28023 | HIGH | 7.5 | 2.6% | May 6, 2021 | Exim 4 before 4.94.2 allows Out-of-bounds Read. smtp_setup_msg may disclose sensitive information from process memory to... |
| CVE-2020-28022 | CRITICAL | 9.8 | 3.0% | May 6, 2021 | Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer. This occurs when... |
| CVE-2020-28021 | HIGH | 8.8 | 4.1% | May 6, 2021 | Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newl... |
| CVE-2020-28020 | CRITICAL | 9.8 | 7.8% | May 6, 2021 | Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute a... |
| CVE-2020-28019 | HIGH | 7.5 | 61.1% | May 6, 2021 | Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequence... |
| CVE-2020-28018 | CRITICAL | 9.8 | 55.8% | May 6, 2021 | Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSS... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now