2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11721 | MEDIUM | 6.5 | 0.9% | Apr 12, 2020 | load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, wh... |
| CVE-2020-11714 | MEDIUM | 5.4 | 0.7% | Apr 12, 2020 | eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location. |
| CVE-2020-11712 | MEDIUM | 6.1 | 1.1% | Apr 12, 2020 | Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field. |
| CVE-2020-11704 | MEDIUM | 6.1 | 0.7% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and R... |
| CVE-2020-11702 | MEDIUM | 6.1 | 0.7% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has Multiple Stored and Re... |
| CVE-2020-9056 | MEDIUM | 5.4 | 0.6% | Apr 10, 2020 | Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated a... |
| CVE-2020-5406 | MEDIUM | 6.5 | 1.0% | Apr 10, 2020 | VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x vers... |
| CVE-2020-1801 | MEDIUM | 5.5 | 0.6% | Apr 10, 2020 | There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does ... |
| CVE-2020-11669 | MEDIUM | 5.5 | 0.5% | Apr 10, 2020 | An issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc/kernel/idle_book3s.S does n... |
| CVE-2020-1802 | MEDIUM | 4.6 | 0.1% | Apr 10, 2020 | There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently valida... |
| CVE-2020-8832 | MEDIUM | 5.5 | 0.5% | Apr 10, 2020 | The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data struc... |
| CVE-2020-1633 | MEDIUM | 6.5 | 0.5% | Apr 9, 2020 | Due to a new NDP proxy feature for EVPN leaf nodes introduced in Junos OS 17.4, crafted NDPv6 packets could transit a Ju... |
| CVE-2020-8834 | MEDIUM | 6.5 | 0.3% | Apr 9, 2020 | KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entr... |
| CVE-2020-7922 | MEDIUM | 6.5 | 0.7% | Apr 9, 2020 | X.509 certificates generated by the MongoDB Enterprise Kubernetes Operator may allow an attacker with access to the Kube... |
| CVE-2020-5263 | MEDIUM | 4.9 | 0.9% | Apr 9, 2020 | auth0.js (NPM package auth0-js) greater than version 8.0.0 and before version 9.12.3 has a vulnerability. In the case of... |
| CVE-2020-9500 | MEDIUM | 4.9 | 1.0% | Apr 9, 2020 | Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the atta... |
| CVE-2020-10623 | MEDIUM | 6.5 | 0.9% | Apr 9, 2020 | Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS (versions... |
| CVE-2020-11556 | MEDIUM | 5.4 | 0.6% | Apr 9, 2020 | An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent (stored) a... |
| CVE-2020-2732 | MEDIUM | 6.8 | 0.9% | Apr 8, 2020 | A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtu... |
| CVE-2020-1637 | MEDIUM | 6.5 | 0.8% | Apr 8, 2020 | A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to acces... |
| CVE-2020-1630 | MEDIUM | 5.5 | 0.2% | Apr 8, 2020 | A privilege escalation vulnerability in Juniper Networks Junos OS devices configured with dual Routing Engines (RE), Vir... |
| CVE-2020-1629 | MEDIUM | 5.9 | 0.7% | Apr 8, 2020 | A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon (RPD) process t... |
| CVE-2020-1628 | MEDIUM | 5.3 | 1.3% | Apr 8, 2020 | Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discov... |
| CVE-2020-1625 | MEDIUM | 6.5 | 0.8% | Apr 8, 2020 | The kernel memory usage represented as "temp" via 'show system virtual-memory' may constantly increase when Integrated R... |
| CVE-2020-1624 | MEDIUM | 5.5 | 0.3% | Apr 8, 2020 | A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now