2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13438 | MEDIUM | 6.5 | 0.8% | May 24, 2020 | ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c. |
| CVE-2020-13435 | MEDIUM | 5.5 | 0.6% | May 24, 2020 | SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. |
| CVE-2020-13434 | MEDIUM | 5.5 | 1.0% | May 24, 2020 | SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. |
| CVE-2020-13430 | MEDIUM | 6.1 | 1.7% | May 24, 2020 | Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource. |
| CVE-2020-13429 | MEDIUM | 5.4 | 0.7% | May 24, 2020 | legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (... |
| CVE-2020-13424 | MEDIUM | 6.5 | 1.7% | May 23, 2020 | The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure. |
| CVE-2020-13416 | MEDIUM | 6.5 | 0.5% | May 22, 2020 | An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is no... |
| CVE-2020-13413 | MEDIUM | 5.3 | 1.4% | May 22, 2020 | An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API,... |
| CVE-2020-12397 | MEDIUM | 4.3 | 0.6% | May 22, 2020 | By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address t... |
| CVE-2020-13397 | MEDIUM | 5.5 | 0.5% | May 22, 2020 | An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security... |
| CVE-2020-7658 | MEDIUM | 6.1 | 0.7% | May 22, 2020 | meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks mi... |
| CVE-2020-10711 | MEDIUM | 5.9 | 3.1% | May 22, 2020 | A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occu... |
| CVE-2020-8789 | MEDIUM | 5.4 | 0.7% | May 22, 2020 | Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration. |
| CVE-2020-3344 | MEDIUM | 5.5 | 0.3% | May 22, 2020 | A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software c... |
| CVE-2020-3343 | MEDIUM | 5.5 | 0.3% | May 22, 2020 | A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software c... |
| CVE-2020-3314 | MEDIUM | 6.1 | 0.6% | May 22, 2020 | A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine t... |
| CVE-2020-1179 | MEDIUM | 6.5 | 6.3% | May 21, 2020 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m... |
| CVE-2020-1173 | MEDIUM | 6.8 | 2.4% | May 21, 2020 | A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded... |
| CVE-2020-1145 | MEDIUM | 5.5 | 1.6% | May 21, 2020 | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje... |
| CVE-2020-1141 | MEDIUM | 5.5 | 1.6% | May 21, 2020 | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje... |
| CVE-2020-1131 | MEDIUM | 5.5 | 0.7% | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m... |
| CVE-2020-1123 | MEDIUM | 5.5 | 1.0% | May 21, 2020 | A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file o... |
| CVE-2020-1116 | MEDIUM | 5.5 | 1.3% | May 21, 2020 | An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to proper... |
| CVE-2020-1113 | MEDIUM | 5.3 | 7.2% | May 21, 2020 | A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly ve... |
| CVE-2020-1107 | MEDIUM | 5.4 | 1.4% | May 21, 2020 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now