2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-19320CRITICAL9.8Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login.
CVE-2020-19319CRITICAL9.8Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login.
CVE-2020-19318HIGH8.8Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows autho...
CVE-2020-24088HIGH7.8An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escal...
CVE-2020-10132MEDIUM6.1SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration.
CVE-2020-10131CRITICAL9.8SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.
CVE-2020-10130HIGH8.8SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super adm...
CVE-2020-10129HIGH8.8SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality.
CVE-2020-10128MEDIUM5.4SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input paramet...
CVE-2020-35593HIGH7.8BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host.
CVE-2020-22612CRITICAL9.8Installer RCE on settings file write in MyBB before 1.8.22.
CVE-2020-18912CRITICAL9.8An issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code via the uload/index-uplog...
CVE-2020-24165HIGH8.8An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate pri...
CVE-2020-27366MEDIUM6.1Cross Site Scripting (XSS) vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local at...
CVE-2020-11711MEDIUM4.8An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login panel leads to SSL VPN cre...
CVE-2020-24113CRITICAL9.1Directory Traversal vulnerability in Contacts File Upload Interface in Yealink W60B version 77.83.0.85, allows attackers...
CVE-2020-35357MEDIUM6.5A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Libr...
CVE-2020-35342HIGH7.5GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c)...
CVE-2020-27418MEDIUM4.4A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vga...
CVE-2020-26683MEDIUM5.5A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensit...
CVE-2020-26652HIGH7.5An issue was discovered in function nl80211_send_chandef in rtl8812au v5.6.4.2 allows attackers to cause a denial of ser...
CVE-2020-25887HIGH8.8Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file.
CVE-2020-24295HIGH8.8Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 [r1859] allows remote attackers to r...
CVE-2020-24294MEDIUM6.5Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remot...
CVE-2020-24293HIGH8.8Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now