2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35912 | MEDIUM | 4.7 | 0.2% | Dec 31, 2020 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockWriteG... |
| CVE-2020-35911 | MEDIUM | 4.7 | 0.2% | Dec 31, 2020 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockReadGu... |
| CVE-2020-35910 | MEDIUM | 5.5 | 0.3% | Dec 31, 2020 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedMutexGuard u... |
| CVE-2020-35909 | HIGH | 7.5 | 1.4% | Dec 31, 2020 | An issue was discovered in the multihash crate before 0.11.3 for Rust. The from_slice parsing code can panic via unsanit... |
| CVE-2020-35908 | MEDIUM | 5.5 | 0.3% | Dec 31, 2020 | An issue was discovered in the futures-util crate before 0.3.2 for Rust. FuturesUnordered can lead to data corruption be... |
| CVE-2020-35907 | MEDIUM | 5.5 | 0.4% | Dec 31, 2020 | An issue was discovered in the futures-task crate before 0.3.5 for Rust. futures_task::noop_waker_ref allows a NULL poin... |
| CVE-2020-35906 | HIGH | 7.8 | 0.5% | Dec 31, 2020 | An issue was discovered in the futures-task crate before 0.3.6 for Rust. futures_task::waker may cause a use-after-free ... |
| CVE-2020-35905 | MEDIUM | 4.7 | 0.3% | Dec 31, 2020 | An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certa... |
| CVE-2020-35904 | MEDIUM | 5.5 | 0.4% | Dec 31, 2020 | An issue was discovered in the crossbeam-channel crate before 0.4.4 for Rust. It has incorrect expectations about the re... |
| CVE-2020-35903 | MEDIUM | 5.5 | 0.4% | Dec 31, 2020 | An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is ... |
| CVE-2020-35902 | CRITICAL | 9.8 | 1.6% | Dec 31, 2020 | An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed. |
| CVE-2020-35901 | HIGH | 7.5 | 1.4% | Dec 31, 2020 | An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream. |
| CVE-2020-35900 | MEDIUM | 5.5 | 0.4% | Dec 31, 2020 | An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A pop_back() call may lead to a use-after-... |
| CVE-2020-35899 | MEDIUM | 5.5 | 0.4% | Dec 31, 2020 | An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more ... |
| CVE-2020-35898 | CRITICAL | 9.1 | 1.4% | Dec 31, 2020 | An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more th... |
| CVE-2020-35851 | CRITICAL | 9.8 | 1.7% | Dec 31, 2020 | HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command... |
| CVE-2020-35743 | HIGH | 7.6 | 0.6% | Dec 31, 2020 | HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of spe... |
| CVE-2020-35742 | HIGH | 7.6 | 0.6% | Dec 31, 2020 | HGiga MailSherlock contains a vulnerability of SQL Injection. Attackers can inject and launch SQL commands in a URL para... |
| CVE-2020-35741 | MEDIUM | 6.1 | 0.6% | Dec 31, 2020 | HGiga MailSherlock does not validate user parameters on multiple login pages. Attackers can use the vulnerability to inj... |
| CVE-2020-35740 | MEDIUM | 6.1 | 0.6% | Dec 31, 2020 | HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax ... |
| CVE-2020-25850 | HIGH | 7.5 | 1.1% | Dec 31, 2020 | The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can us... |
| CVE-2020-25848 | CRITICAL | 9.8 | 1.7% | Dec 31, 2020 | HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password gener... |
| CVE-2020-25846 | HIGH | 7.4 | 1.0% | Dec 31, 2020 | The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB... |
| CVE-2020-25845 | HIGH | 7.4 | 1.0% | Dec 31, 2020 | Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being re... |
| CVE-2020-25844 | CRITICAL | 9.8 | 1.9% | Dec 31, 2020 | The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a sta... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now