2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35530 | MEDIUM | 5.5 | 0.4% | Sep 1, 2022 | In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patc... |
| CVE-2020-27784 | MEDIUM | 5.5 | 0.2% | Sep 1, 2022 | A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer_ioctl() printer_ioctl()... |
| CVE-2020-35538 | MEDIUM | 5.5 | 0.3% | Aug 31, 2022 | A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. |
| CVE-2020-27802 | MEDIUM | 5.5 | 0.3% | Aug 25, 2022 | An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O ... |
| CVE-2020-27798 | MEDIUM | 5.5 | 0.3% | Aug 25, 2022 | An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mac... |
| CVE-2020-27797 | MEDIUM | 5.5 | 0.3% | Aug 25, 2022 | An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted... |
| CVE-2020-35509 | MEDIUM | 5.4 | 0.3% | Aug 23, 2022 | A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direc... |
| CVE-2020-35992 | MEDIUM | 6.5 | 0.6% | Aug 23, 2022 | Fiserv Prologue through 2020-12-16 does not properly protect the database password. If an attacker were to gain access t... |
| CVE-2020-23466 | MEDIUM | 5.4 | 0.5% | Aug 19, 2022 | Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attacke... |
| CVE-2020-27788 | MEDIUM | 5.5 | 0.3% | Aug 18, 2022 | An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp f... |
| CVE-2020-27790 | MEDIUM | 5.5 | 0.3% | Aug 18, 2022 | A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp f... |
| CVE-2020-27787 | MEDIUM | 5.5 | 0.4% | Aug 18, 2022 | A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input... |
| CVE-2020-1755 | MEDIUM | 5.3 | 0.5% | Aug 16, 2022 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to... |
| CVE-2020-14379 | MEDIUM | 5.6 | 0.2% | Aug 16, 2022 | A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading ... |
| CVE-2020-14320 | MEDIUM | 6.1 | 0.6% | Aug 16, 2022 | In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflect... |
| CVE-2020-10710 | MEDIUM | 4.4 | 0.2% | Aug 16, 2022 | A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satell... |
| CVE-2020-1754 | MEDIUM | 4.3 | 0.5% | Aug 5, 2022 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' ... |
| CVE-2020-1691 | MEDIUM | 5.4 | 0.5% | Aug 5, 2022 | In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stor... |
| CVE-2020-36290 | MEDIUM | 5.4 | 0.6% | Jul 26, 2022 | The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and fro... |
| CVE-2020-7649 | MEDIUM | 4.9 | 1.4% | Jul 25, 2022 | This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's inter... |
| CVE-2020-28459 | MEDIUM | 6.1 | 0.5% | Jul 25, 2022 | This affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx fo... |
| CVE-2020-28455 | MEDIUM | 6.1 | 0.5% | Jul 25, 2022 | This affects all versions of package markdown-it-toc. The title of the generated toc and the contents of the header are ... |
| CVE-2020-36558 | MEDIUM | 5.1 | 0.3% | Jul 21, 2022 | A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and gene... |
| CVE-2020-36557 | MEDIUM | 5.1 | 0.2% | Jul 21, 2022 | A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lea... |
| CVE-2020-23563 | MEDIUM | 5.5 | 0.3% | Jul 18, 2022 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now