2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36511 | HIGH | 7.5 | 1.1% | Dec 27, 2021 | An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::read_framed_max may re... |
| CVE-2020-3886 | HIGH | 7.8 | 1.0% | Dec 23, 2021 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Sec... |
| CVE-2020-20593 | HIGH | 8 | 0.4% | Dec 22, 2021 | A cross-site request forgery (CSRF) in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrato... |
| CVE-2020-19316 | HIGH | 8.8 | 2.5% | Dec 20, 2021 | OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17. |
| CVE-2020-8105 | HIGH | 7.8 | 1.0% | Dec 20, 2021 | OS Command Injection vulnerability in the wirelessConnect handler of Abode iota All-In-One Security Kit allows an attack... |
| CVE-2020-8968 | HIGH | 7.1 | 0.3% | Dec 17, 2021 | Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text for... |
| CVE-2020-18081 | HIGH | 7.5 | 1.1% | Dec 17, 2021 | The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the pass... |
| CVE-2020-18077 | HIGH | 7.5 | 1.2% | Dec 17, 2021 | A buffer overflow vulnerability in the Virtual Path Mapping component of FTPShell v6.83 allows attackers to cause a deni... |
| CVE-2020-35214 | HIGH | 8.1 | 0.8% | Dec 16, 2021 | An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operati... |
| CVE-2020-35213 | HIGH | 8.1 | 1.2% | Dec 16, 2021 | An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a ma... |
| CVE-2020-35211 | HIGH | 7.5 | 1.0% | Dec 16, 2021 | An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation ... |
| CVE-2020-35209 | HIGH | 7.5 | 0.9% | Dec 16, 2021 | An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration informat... |
| CVE-2020-23545 | HIGH | 7.8 | 1.3% | Dec 15, 2021 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531. |
| CVE-2020-16156 | HIGH | 7.8 | 0.8% | Dec 13, 2021 | CPAN 2.28 allows Signature Verification Bypass. |
| CVE-2020-16154 | HIGH | 7.8 | 0.7% | Dec 13, 2021 | The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. |
| CVE-2020-19682 | HIGH | 8.8 | 0.5% | Dec 9, 2021 | A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php. |
| CVE-2020-12140 | HIGH | 8.8 | 0.9% | Dec 7, 2021 | A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to exe... |
| CVE-2020-29176 | HIGH | 7.8 | 0.8% | Dec 2, 2021 | An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted... |
| CVE-2020-36133 | HIGH | 8.8 | 1.6% | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h. |
| CVE-2020-36131 | HIGH | 8.8 | 1.6% | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c. |
| CVE-2020-36129 | HIGH | 8.8 | 1.4% | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c. |
| CVE-2020-35012 | HIGH | 7.2 | 1.5% | Dec 1, 2021 | The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape a parameter before using it in a SQL state... |
| CVE-2020-10627 | HIGH | 8.1 | 0.5% | Dec 1, 2021 | Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wir... |
| CVE-2020-7880 | HIGH | 8.8 | 1.6% | Nov 30, 2021 | The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote a... |
| CVE-2020-7881 | HIGH | 8.8 | 1.4% | Nov 26, 2021 | The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now