2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-6525HIGH8.8Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit hea...
CVE-2020-6524HIGH8.8Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit...
CVE-2020-6523HIGH8.8Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap...
CVE-2020-6520HIGH8.8Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap cor...
CVE-2020-6518HIGH8.8Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the...
CVE-2020-6517HIGH8.8Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit ...
CVE-2020-6515HIGH8.8Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap...
CVE-2020-6513HIGH8.8Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit h...
CVE-2020-6512HIGH8.8Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corrup...
CVE-2020-6510HIGH7.8Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially...
CVE-2020-6507HIGH8.8Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap ...
CVE-2020-15890HIGH7.5LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.
CVE-2020-15888HIGH8.8Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffe...
CVE-2020-15724HIGH7.8In the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome.exe, there exists a loca...
CVE-2020-15723HIGH7.8In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome...
CVE-2020-15722HIGH7.8In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privileg...
CVE-2020-15879HIGH7.5Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe,...
CVE-2020-15877HIGH8.8An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guar...
CVE-2020-12499HIGH7.3In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on imp...
CVE-2020-4125HIGH8.1Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL enviro...
CVE-2020-15852HIGH7.8An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attac...
CVE-2020-3481HIGH7.5A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could a...
CVE-2020-15052HIGH7.5An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alia...
CVE-2020-8214HIGH7.5A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file.
CVE-2020-12031HIGH7.8In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a lo...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now