2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-13612——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-13611——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-13610——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-13609——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-13608——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-13607——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-13606——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-13605——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-13604——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2020-24994HIGH8.8Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause ...
CVE-2020-12483MEDIUM6.1The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps...
CVE-2020-7346HIGH7.8Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, lo...
CVE-2020-28503CRITICAL9.8The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.
CVE-2020-9213HIGH7.5There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling ...
CVE-2020-9212MEDIUM6.5There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs ...
CVE-2020-9206MEDIUM6.7The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific o...
CVE-2020-4882MEDIUM6.1IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from u...
CVE-2020-28501HIGH7.5This affects the package es6-crawler-detect before 3.1.3. No limitation of user agent string length supplied to regex op...
CVE-2020-13963CRITICAL9.8SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authenticati...
CVE-2020-27171MEDIUM6An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resulta...
CVE-2020-27170MEDIUM4.7An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds spec...
CVE-2020-4635MEDIUM5.3IBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to enumerate usernames.
CVE-2020-25097HIGH8.6An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trust...
CVE-2020-6578MEDIUM6.1Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_...
CVE-2020-6577CRITICAL9.8The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c (German edition) allows itrk-api.php rechtstext_language SQL Injection.

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now