2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8627 | — | — | — | Apr 8, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
| CVE-2020-8626 | — | — | — | Apr 8, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
| CVE-2020-23426 | CRITICAL | 9.8 | 3.7% | Apr 8, 2021 | zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an... |
| CVE-2020-36316 | MEDIUM | 5.5 | 1.2% | Apr 7, 2021 | In RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification because garbage bytes can b... |
| CVE-2020-36315 | MEDIUM | 5.3 | 0.9% | Apr 7, 2021 | In RELIC before 2020-08-01, RSA PKCS#1 v1.5 signature forgery can occur because certain checks of the padding (and of th... |
| CVE-2020-24140 | HIGH | 8.3 | 1.2% | Apr 7, 2021 | Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable... |
| CVE-2020-24139 | HIGH | 8.3 | 1.1% | Apr 7, 2021 | Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerabl... |
| CVE-2020-24137 | MEDIUM | 5.3 | 1.4% | Apr 7, 2021 | Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running... |
| CVE-2020-24135 | MEDIUM | 6.1 | 0.9% | Apr 7, 2021 | A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inje... |
| CVE-2020-25584 | HIGH | 7.5 | 0.2% | Apr 7, 2021 | In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-... |
| CVE-2020-24138 | MEDIUM | 6.1 | 0.9% | Apr 7, 2021 | Cross Site Scripting (XSS) vulnerability in wcms 0.3.2 allows remote attackers to inject arbitrary web script and HTML v... |
| CVE-2020-24136 | HIGH | 8.6 | 2.2% | Apr 7, 2021 | Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an applicatio... |
| CVE-2020-36314 | LOW | 3.9 | 0.6% | Apr 7, 2021 | fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory... |
| CVE-2020-11255 | HIGH | 7.5 | 0.7% | Apr 7, 2021 | Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is f... |
| CVE-2020-11252 | MEDIUM | 5.5 | 0.2% | Apr 7, 2021 | Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Sna... |
| CVE-2020-11251 | CRITICAL | 9.1 | 0.9% | Apr 7, 2021 | Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Sn... |
| CVE-2020-11247 | CRITICAL | 9.1 | 0.9% | Apr 7, 2021 | Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute,... |
| CVE-2020-11246 | HIGH | 7.8 | 0.2% | Apr 7, 2021 | A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapd... |
| CVE-2020-11245 | HIGH | 7.8 | 0.2% | Apr 7, 2021 | Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Au... |
| CVE-2020-11243 | HIGH | 7.5 | 0.7% | Apr 7, 2021 | RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to... |
| CVE-2020-11242 | HIGH | 7.8 | 0.2% | Apr 7, 2021 | User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to captu... |
| CVE-2020-11237 | HIGH | 7.8 | 0.2% | Apr 7, 2021 | Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before access... |
| CVE-2020-11236 | MEDIUM | 5.5 | 0.4% | Apr 7, 2021 | Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of servic... |
| CVE-2020-11234 | HIGH | 7.8 | 0.2% | Apr 7, 2021 | When sending a socket event message to a user application, invalid information will be passed if socket is freed by othe... |
| CVE-2020-11231 | MEDIUM | 6.7 | 0.2% | Apr 7, 2021 | Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in tu... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now