2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35448 | LOW | 3.3 | 1.3% | Dec 27, 2020 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1.... |
| CVE-2020-8290 | HIGH | 7.8 | 0.6% | Dec 27, 2020 | Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit`... |
| CVE-2020-8289 | HIGH | 7.8 | 4.7% | Dec 27, 2020 | Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validat... |
| CVE-2020-7845 | CRITICAL | 9.8 | 2.7% | Dec 27, 2020 | Spamsniper 5.0 ~ 5.2.7 contain a stack-based buffer overflow vulnerability caused by improper boundary checks when parsi... |
| CVE-2020-35678 | MEDIUM | 6.1 | 1.4% | Dec 27, 2020 | Autobahn|Python before 20.12.3 allows redirect header injection. |
| CVE-2020-35245 | CRITICAL | 9.8 | 1.1% | Dec 26, 2020 | Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser. |
| CVE-2020-35244 | CRITICAL | 9.8 | 1.1% | Dec 26, 2020 | Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup. |
| CVE-2020-35243 | CRITICAL | 9.8 | 1.1% | Dec 26, 2020 | Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb. |
| CVE-2020-35242 | CRITICAL | 9.8 | 1.1% | Dec 26, 2020 | Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAnd... |
| CVE-2020-29203 | CRITICAL | 9.8 | 1.3% | Dec 26, 2020 | struct2json before 2020-11-18 is affected by a Buffer Overflow because strcpy is used for S2J_STRUCT_GET_string_ELEMENT. |
| CVE-2020-28759 | MEDIUM | 5.5 | 0.7% | Dec 26, 2020 | The serializer module in OAID Tengine lite-v1.0 has a Buffer Overflow and crash. NOTE: another person has stated "I don'... |
| CVE-2020-35364 | CRITICAL | 9.8 | 1.9% | Dec 26, 2020 | Beijing Huorong Internet Security 5.0.55.2 allows a non-admin user to escalate privileges by injecting code into a proce... |
| CVE-2020-35362 | HIGH | 7.5 | 1.6% | Dec 26, 2020 | DEXT5Upload 2.7.1262310 and earlier is affected by Directory Traversal in handler/dext5handler.jsp. This could allow rem... |
| CVE-2020-35284 | HIGH | 7.5 | 1.6% | Dec 26, 2020 | Flamingo (aka FlamingoIM) through 2020-09-29 allows ../ directory traversal because the only ostensibly unpredictable pa... |
| CVE-2020-35450 | HIGH | 7.5 | 1.4% | Dec 26, 2020 | Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls. |
| CVE-2020-35359 | HIGH | 7.5 | 4.7% | Dec 26, 2020 | Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the con... |
| CVE-2020-35437 | MEDIUM | 6.1 | 3.0% | Dec 26, 2020 | Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the... |
| CVE-2020-35376 | HIGH | 7.5 | 2.1% | Dec 26, 2020 | Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to... |
| CVE-2020-35349 | MEDIUM | 4.8 | 0.6% | Dec 26, 2020 | Savsoft Quiz 5 is affected by: Cross Site Scripting (XSS) via field_title (aka a title on the custom fields page). |
| CVE-2020-35347 | MEDIUM | 6.5 | 0.4% | Dec 26, 2020 | CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add. |
| CVE-2020-35346 | MEDIUM | 4.8 | 0.7% | Dec 26, 2020 | CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script ... |
| CVE-2020-20412 | MEDIUM | 6.5 | 1.0% | Dec 26, 2020 | lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has insufficient array bounds ... |
| CVE-2020-35388 | HIGH | 7.5 | 1.5% | Dec 26, 2020 | rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in whi... |
| CVE-2020-35575 | CRITICAL | 9.8 | 7.6% | Dec 26, 2020 | A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full adminis... |
| CVE-2020-29385 | MEDIUM | 5.5 | 1.5% | Dec 26, 2020 | GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now