2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5900 | HIGH | 8.8 | 0.5% | Jul 1, 2020 | In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for... |
| CVE-2020-12603 | HIGH | 7.5 | 1.4% | Jul 1, 2020 | Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or... |
| CVE-2020-15478 | HIGH | 7.5 | 4.7% | Jul 1, 2020 | The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors. |
| CVE-2020-15476 | HIGH | 7.5 | 2.1% | Jul 1, 2020 | In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protoc... |
| CVE-2020-14167 | HIGH | 7.5 | 2.1% | Jul 1, 2020 | The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8... |
| CVE-2020-5972 | HIGH | 7.1 | 0.3% | Jun 30, 2020 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer variables are not initial... |
| CVE-2020-5971 | HIGH | 7.8 | 0.4% | Jun 30, 2020 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software reads from a buffer by usi... |
| CVE-2020-5970 | HIGH | 7.1 | 0.3% | Jun 30, 2020 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, wh... |
| CVE-2020-5968 | HIGH | 7.8 | 0.4% | Jun 30, 2020 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software does not restrict or incor... |
| CVE-2020-14947 | HIGH | 8.8 | 19.5% | Jun 30, 2020 | OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php bec... |
| CVE-2020-9414 | HIGH | 8.8 | 1.7% | Jun 30, 2020 | The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed Fi... |
| CVE-2020-7049 | HIGH | 7.3 | 0.9% | Jun 30, 2020 | Nozomi Networks OS before 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection. |
| CVE-2020-14474 | HIGH | 7.5 | 2.5% | Jun 30, 2020 | The Cellebrite UFED physical device 5.0 through 7.5.0.845 relies on key material hardcoded within both the executable co... |
| CVE-2020-14058 | HIGH | 7.5 | 2.6% | Jun 30, 2020 | An issue was discovered in Squid before 4.12 and 5.x before 5.0.3. Due to use of a potentially dangerous function, Squid... |
| CVE-2020-15049 | HIGH | 8.8 | 5.7% | Jun 30, 2020 | An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggli... |
| CVE-2020-14482 | HIGH | 7.8 | 2.6% | Jun 30, 2020 | Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Opening a specially crafted project file may overflow... |
| CVE-2020-15087 | HIGH | 8.8 | 1.1% | Jun 30, 2020 | In Presto before version 337, authenticated users can bypass authorization checks by directly accessing internal APIs. T... |
| CVE-2020-13095 | HIGH | 8.8 | 1.9% | Jun 30, 2020 | Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the use... |
| CVE-2020-4044 | HIGH | 7.8 | 2.4% | Jun 30, 2020 | The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious pa... |
| CVE-2020-9483 | HIGH | 7.5 | 34.6% | Jun 30, 2020 | **Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is ... |
| CVE-2020-14957 | HIGH | 7.8 | 0.4% | Jun 30, 2020 | In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) ... |
| CVE-2020-14956 | HIGH | 7.8 | 0.4% | Jun 30, 2020 | In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) ... |
| CVE-2020-7816 | HIGH | 7.8 | 1.4% | Jun 30, 2020 | A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticate... |
| CVE-2020-15397 | HIGH | 7.8 | 0.5% | Jun 30, 2020 | HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileg... |
| CVE-2020-15396 | HIGH | 7.8 | 0.4% | Jun 30, 2020 | In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. B... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now