2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27637 | CRITICAL | 9.8 | 2.2% | Jan 12, 2021 | The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to... |
| CVE-2020-26050 | HIGH | 7.8 | 0.6% | Jan 12, 2021 | SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to SY... |
| CVE-2020-16146 | HIGH | 7.5 | 1.4% | Jan 12, 2021 | Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x thr... |
| CVE-2020-0471 | CRITICAL | 9.8 | 1.6% | Jan 11, 2021 | In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetoot... |
| CVE-2020-27059 | HIGH | 7.8 | 0.2% | Jan 11, 2021 | In onAuthenticated of AuthenticationClient.java, there is a possible tapjacking attack when requesting the user's finger... |
| CVE-2020-24027 | CRITICAL | 9.8 | 1.6% | Jan 11, 2021 | In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling o... |
| CVE-2020-23631 | MEDIUM | 6.1 | 0.5% | Jan 11, 2021 | Cross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-si... |
| CVE-2020-26298 | MEDIUM | 5.4 | 1.6% | Jan 11, 2021 | Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerabil... |
| CVE-2020-24025 | MEDIUM | 5.3 | 0.8% | Jan 11, 2021 | Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specify... |
| CVE-2020-13559 | HIGH | 7.5 | 1.3% | Jan 11, 2021 | A denial-of-service vulnerability exists in the traffic-logging functionality of FreyrSCADA IEC-60879-5-104 Server Simul... |
| CVE-2020-4869 | MEDIUM | 6.5 | 1.8% | Jan 11, 2021 | IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow. A remote attacker... |
| CVE-2020-35701 | HIGH | 8.8 | 4.6% | Jan 11, 2021 | An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in data_debug.php allows remote aut... |
| CVE-2020-27293 | HIGH | 7.8 | 2.0% | Jan 11, 2021 | Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which ... |
| CVE-2020-27291 | HIGH | 7.8 | 1.9% | Jan 11, 2021 | Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project f... |
| CVE-2020-27289 | HIGH | 7.8 | 1.9% | Jan 11, 2021 | Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project fil... |
| CVE-2020-27287 | HIGH | 7.8 | 2.5% | Jan 11, 2021 | Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project ... |
| CVE-2020-27281 | HIGH | 7.8 | 2.0% | Jan 11, 2021 | A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when proces... |
| CVE-2020-27277 | HIGH | 7.8 | 2.2% | Jan 11, 2021 | Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files... |
| CVE-2020-27275 | HIGH | 7.8 | 3.3% | Jan 11, 2021 | Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project fi... |
| CVE-2020-25659 | MEDIUM | 5.9 | 2.5% | Jan 11, 2021 | python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing o... |
| CVE-2020-24003 | LOW | 3.3 | 1.2% | Jan 11, 2021 | Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process ... |
| CVE-2020-23960 | HIGH | 8.8 | 0.7% | Jan 11, 2021 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attac... |
| CVE-2020-17534 | HIGH | 7 | 0.4% | Jan 11, 2021 | There exists a race condition between the deletion of the temporary file and the creation of the temporary directory in ... |
| CVE-2020-35483 | HIGH | 7.8 | 0.5% | Jan 11, 2021 | AnyDesk before 6.1.0 on Windows, when run in portable mode on a system where the attacker has write access to the applic... |
| CVE-2020-2508 | HIGH | 7.2 | 1.8% | Jan 11, 2021 | A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now