2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-23553 | HIGH | 7.8 | 0.3% | Sep 16, 2022 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33. |
| CVE-2020-23552 | HIGH | 7.8 | 0.3% | Sep 16, 2022 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62. |
| CVE-2020-23551 | HIGH | 7.8 | 0.3% | Sep 16, 2022 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30. |
| CVE-2020-23550 | HIGH | 7.8 | 0.3% | Sep 16, 2022 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82. |
| CVE-2020-10735 | HIGH | 7.5 | 4.5% | Sep 9, 2022 | A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"),... |
| CVE-2020-29260 | HIGH | 7.5 | 0.9% | Sep 2, 2022 | libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup(). |
| CVE-2020-35525 | HIGH | 7.5 | 1.1% | Sep 1, 2022 | In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. |
| CVE-2020-26938 | HIGH | 7.2 | 0.7% | Aug 29, 2022 | In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the aut... |
| CVE-2020-27801 | HIGH | 7.8 | 0.4% | Aug 25, 2022 | A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. |
| CVE-2020-27800 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. |
| CVE-2020-27799 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mac... |
| CVE-2020-27796 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafte... |
| CVE-2020-35511 | HIGH | 7.8 | 0.3% | Aug 23, 2022 | A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file... |
| CVE-2020-27795 | HIGH | 7.5 | 1.2% | Aug 19, 2022 | A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or w... |
| CVE-2020-27793 | HIGH | 7.5 | 0.9% | Aug 19, 2022 | An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an atta... |
| CVE-2020-27792 | HIGH | 7.1 | 0.4% | Aug 19, 2022 | A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c fi... |
| CVE-2020-1756 | HIGH | 7.2 | 0.9% | Aug 16, 2022 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin... |
| CVE-2020-14322 | HIGH | 7.5 | 0.8% | Aug 16, 2022 | In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitig... |
| CVE-2020-14321 | HIGH | 8.8 | 16.4% | Aug 16, 2022 | In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role wi... |
| CVE-2020-10728 | HIGH | 7.8 | 0.2% | Aug 16, 2022 | A flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1. This container grants all us... |
| CVE-2020-23622 | HIGH | 7.5 | 1.0% | Aug 15, 2022 | An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service ... |
| CVE-2020-21641 | HIGH | 7.5 | 4.3% | Aug 15, 2022 | Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote a... |
| CVE-2020-21365 | HIGH | 7.5 | 1.8% | Aug 15, 2022 | Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose... |
| CVE-2020-6998 | HIGH | 8.6 | 1.7% | Jul 27, 2022 | The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 ... |
| CVE-2020-28422 | HIGH | 7.8 | 0.5% | Jul 25, 2022 | All versions of package git-archive are vulnerable to Command Injection via the exports function. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now