2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-16030MEDIUM6.1Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitra...
CVE-2020-16029HIGH8.8Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass naviga...
CVE-2020-16028HIGH8.8Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit h...
CVE-2020-16027MEDIUM6.5Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convin...
CVE-2020-16026HIGH8.8Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap co...
CVE-2020-16025CRITICAL9.6Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised t...
CVE-2020-16024CRITICAL9.6Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the rend...
CVE-2020-16023HIGH8.8Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap...
CVE-2020-16022HIGH8.8Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potent...
CVE-2020-16021HIGH7.5Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised th...
CVE-2020-16020HIGH8.8Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker ...
CVE-2020-16019HIGH8.8Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker ...
CVE-2020-16018CRITICAL9.6Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the rend...
CVE-2020-16017CRITICAL9.6Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised t...
CVE-2020-16016CRITICAL9.6Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromis...
CVE-2020-16015HIGH8.8Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exp...
CVE-2020-16014CRITICAL9.6Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the rendere...
CVE-2020-16013HIGH8.8Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially expl...
CVE-2020-16012MEDIUM4.3Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cr...
CVE-2020-28208MEDIUM5.3An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.9.1.
CVE-2020-26664HIGH7.8A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based...
CVE-2020-25678MEDIUM4.4A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be f...
CVE-2020-17504HIGH7.2The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that w...
CVE-2020-17503HIGH7.2The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that w...
CVE-2020-17502HIGH7.2Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4). The NDN-210 has a web administration panel which i...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now