2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36214 | MEDIUM | 5.9 | 1.1% | Jan 26, 2021 | An issue was discovered in the multiqueue2 crate before 0.1.7 for Rust. Because a non-Send type can be sent to a differe... |
| CVE-2020-36213 | HIGH | 7.5 | 1.4% | Jan 26, 2021 | An issue was discovered in the abi_stable crate before 0.9.1 for Rust. A retain call can create an invalid UTF-8 string,... |
| CVE-2020-36212 | HIGH | 7.5 | 1.4% | Jan 26, 2021 | An issue was discovered in the abi_stable crate before 0.9.1 for Rust. DrainFilter lacks soundness because of a double d... |
| CVE-2020-36211 | HIGH | 7 | 0.3% | Jan 26, 2021 | An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send ... |
| CVE-2020-36210 | HIGH | 7.8 | 0.4% | Jan 26, 2021 | An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized mem... |
| CVE-2020-36209 | HIGH | 7 | 0.4% | Jan 26, 2021 | An issue was discovered in the late-static crate before 0.4.0 for Rust. Because Sync is implemented for LateStatic with ... |
| CVE-2020-36208 | HIGH | 7.8 | 0.4% | Jan 26, 2021 | An issue was discovered in the conquer-once crate before 0.3.2 for Rust. Thread crossing can occur for a non-Send but Sy... |
| CVE-2020-36207 | HIGH | 7 | 0.3% | Jan 26, 2021 | An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Sen... |
| CVE-2020-36206 | HIGH | 7 | 0.3% | Jan 26, 2021 | An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race ... |
| CVE-2020-36205 | MEDIUM | 5.5 | 0.4% | Jan 26, 2021 | An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of th... |
| CVE-2020-36204 | MEDIUM | 4.7 | 0.3% | Jan 26, 2021 | An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send ... |
| CVE-2020-36203 | MEDIUM | 4.7 | 0.2% | Jan 26, 2021 | An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leadi... |
| CVE-2020-36202 | MEDIUM | 6.1 | 0.8% | Jan 26, 2021 | An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reve... |
| CVE-2020-36201 | HIGH | 7.5 | 0.8% | Jan 26, 2021 | An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655,... |
| CVE-2020-36200 | MEDIUM | 6.5 | 0.8% | Jan 26, 2021 | TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafte... |
| CVE-2020-36199 | CRITICAL | 9.8 | 2.2% | Jan 26, 2021 | TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input par... |
| CVE-2020-36011 | MEDIUM | 4.8 | 0.7% | Jan 26, 2021 | A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote att... |
| CVE-2020-35854 | MEDIUM | 4.8 | 0.7% | Jan 26, 2021 | Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter. |
| CVE-2020-35853 | MEDIUM | 4.8 | 0.6% | Jan 26, 2021 | 4images Image Gallery Management System 1.7.11 is affected by cross-site scripting (XSS) in the Image URL. This vulnerab... |
| CVE-2020-35845 | HIGH | 7.8 | 0.9% | Jan 26, 2021 | FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x96cf. |
| CVE-2020-35844 | HIGH | 7.8 | 0.9% | Jan 26, 2021 | FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0xbe9c4. |
| CVE-2020-35843 | MEDIUM | 5.5 | 0.7% | Jan 26, 2021 | FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x956e. |
| CVE-2020-35753 | MEDIUM | 6.1 | 0.9% | Jan 26, 2021 | The job posting recommendation form in Persis Human Resource Management Portal (Versions 17.2.00 through 17.2.35 and 19.... |
| CVE-2020-35576 | HIGH | 8.8 | 42.3% | Jan 26, 2021 | A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216... |
| CVE-2020-35513 | MEDIUM | 4.9 | 1.3% | Jan 26, 2021 | A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now