2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-23565 | HIGH | 7.8 | 1.1% | Nov 5, 2021 | Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faultin... |
| CVE-2020-6931 | HIGH | 7.8 | 0.3% | Nov 3, 2021 | HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege. |
| CVE-2020-28416 | HIGH | 7.8 | 0.4% | Nov 3, 2021 | HP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition) software available with... |
| CVE-2020-18263 | HIGH | 7.5 | 0.9% | Nov 3, 2021 | PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search paramete... |
| CVE-2020-23680 | HIGH | 7.8 | 0.6% | Nov 3, 2021 | An issue was discovered in function StartPage in text2pdf.c in pdfcorner text2pdf 1.1, allows attackers to cause denial ... |
| CVE-2020-23109 | HIGH | 8.1 | 1.2% | Nov 3, 2021 | Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attack... |
| CVE-2020-23686 | HIGH | 8.8 | 0.6% | Nov 2, 2021 | Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or... |
| CVE-2020-21574 | HIGH | 7.5 | 0.9% | Nov 2, 2021 | Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long ur... |
| CVE-2020-21572 | HIGH | 7.5 | 1.2% | Nov 2, 2021 | Buffer overflow vulnerability in function src_parser_trans_stage_1_2_3 trgil gilcc before commit 803969389ca9c06237075a7... |
| CVE-2020-20658 | HIGH | 7.5 | 1.0% | Nov 2, 2021 | Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denail of service when tryin... |
| CVE-2020-20657 | HIGH | 7.5 | 1.0% | Nov 2, 2021 | Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denial of service via an une... |
| CVE-2020-18438 | HIGH | 7.5 | 1.6% | Nov 2, 2021 | Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the titl... |
| CVE-2020-28702 | HIGH | 7.5 | 1.1% | Nov 1, 2021 | A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database inform... |
| CVE-2020-36503 | HIGH | 8 | 1.2% | Nov 1, 2021 | The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, w... |
| CVE-2020-23549 | HIGH | 7.8 | 0.9% | Oct 28, 2021 | IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 fi... |
| CVE-2020-23546 | HIGH | 7.8 | 1.0% | Oct 28, 2021 | IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM fil... |
| CVE-2020-9897 | HIGH | 7.8 | 0.9% | Oct 28, 2021 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, ma... |
| CVE-2020-7875 | HIGH | 8.8 | 0.6% | Oct 28, 2021 | DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and e... |
| CVE-2020-7867 | HIGH | 7.8 | 0.8% | Oct 27, 2021 | An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and... |
| CVE-2020-36485 | HIGH | 7.8 | 0.5% | Oct 22, 2021 | Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter o... |
| CVE-2020-28969 | HIGH | 7.8 | 0.6% | Oct 22, 2021 | Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow which allows attackers to cause a denial of service (DoS) vi... |
| CVE-2020-28967 | HIGH | 8.8 | 8.9% | Oct 22, 2021 | FlashGet v1.9.6 was discovered to contain a buffer overflow in the 'current path directory' function. This vulnerability... |
| CVE-2020-28963 | HIGH | 7.8 | 0.4% | Oct 22, 2021 | Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress funct... |
| CVE-2020-23061 | HIGH | 7.5 | 1.6% | Oct 22, 2021 | Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the `list` and... |
| CVE-2020-23060 | HIGH | 7.1 | 0.4% | Oct 22, 2021 | Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. Thi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now