2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28431 | — | — | — | Feb 23, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-28430 | — | — | — | Feb 23, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-28429 | CRITICAL | 9.8 | 63.3% | Feb 23, 2021 | All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require("geoj... |
| CVE-2020-14359 | HIGH | 7.3 | 0.9% | Feb 23, 2021 | A vulnerability was found in all versions of Keycloak Gatekeeper, where on using lower case HTTP headers (via cURL) an a... |
| CVE-2020-8902 | MEDIUM | 4.3 | 0.3% | Feb 23, 2021 | Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery (SSRF) attack. An attacker can u... |
| CVE-2020-13697 | MEDIUM | 6.1 | 0.8% | Feb 23, 2021 | An issue was discovered in RouterNanoHTTPD.java in NanoHTTPD through 2.3.1. The GeneralHandler class implements a basic ... |
| CVE-2020-29075 | MEDIUM | 6.5 | 7.8% | Feb 23, 2021 | Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) a... |
| CVE-2020-27819 | MEDIUM | 5.5 | 0.8% | Feb 23, 2021 | An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer derefere... |
| CVE-2020-27768 | LOW | 3.3 | 1.4% | Feb 23, 2021 | In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-priva... |
| CVE-2020-25690 | HIGH | 8.8 | 1.3% | Feb 23, 2021 | An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certai... |
| CVE-2020-35852 | MEDIUM | 6.1 | 1.1% | Feb 23, 2021 | Chatbox is affected by cross-site scripting (XSS). An attacker has to upload any XSS payload with SVG, XML file in Chatb... |
| CVE-2020-36232 | MEDIUM | 5 | 1.0% | Feb 22, 2021 | The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from vers... |
| CVE-2020-29453 | MEDIUM | 5.3 | 23.1% | Feb 22, 2021 | The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 befor... |
| CVE-2020-29448 | MEDIUM | 5.3 | 2.3% | Feb 22, 2021 | The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center before version 6.13.18, ... |
| CVE-2020-22475 | MEDIUM | 6.8 | 0.5% | Feb 22, 2021 | "Tasks" application version before 9.7.3 is affected by insecure permissions. The VoiceCommandActivity application compo... |
| CVE-2020-22474 | MEDIUM | 6.5 | 1.0% | Feb 22, 2021 | In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local fi... |
| CVE-2020-24175 | HIGH | 7.8 | 1.8% | Feb 22, 2021 | Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8.14, allows at... |
| CVE-2020-21224 | CRITICAL | 9.8 | 38.7% | Feb 22, 2021 | A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a maliciou... |
| CVE-2020-19762 | MEDIUM | 6.1 | 1.0% | Feb 22, 2021 | Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code vi... |
| CVE-2020-3664 | MEDIUM | 6 | 0.2% | Feb 22, 2021 | Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon ... |
| CVE-2020-11297 | HIGH | 7.5 | 0.6% | Feb 22, 2021 | Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdr... |
| CVE-2020-11296 | HIGH | 7.5 | 0.6% | Feb 22, 2021 | Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Com... |
| CVE-2020-11287 | HIGH | 7.5 | 0.7% | Feb 22, 2021 | Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to informati... |
| CVE-2020-11286 | MEDIUM | 6.8 | 0.2% | Feb 22, 2021 | An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard... |
| CVE-2020-11283 | CRITICAL | 9.8 | 0.7% | Feb 22, 2021 | A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Comp... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now