2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-16971 | HIGH | 7.4 | 3.6% | Dec 10, 2020 | Azure SDK for Java Security Feature Bypass Vulnerability |
| CVE-2020-16964 | HIGH | 7.8 | 1.2% | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16963 | HIGH | 7.8 | 1.2% | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16962 | HIGH | 7.8 | 1.2% | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16961 | HIGH | 7.8 | 1.2% | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16960 | HIGH | 7.8 | 1.2% | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16959 | HIGH | 7.8 | 1.2% | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16958 | HIGH | 7.8 | 1.2% | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-29259 | MEDIUM | 5.4 | 0.7% | Dec 9, 2020 | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedb... |
| CVE-2020-29258 | MEDIUM | 6.1 | 0.7% | Dec 9, 2020 | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php. |
| CVE-2020-29257 | MEDIUM | 6.1 | 0.7% | Dec 9, 2020 | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php. |
| CVE-2020-10143 | HIGH | 7.8 | 0.6% | Dec 9, 2020 | Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl\. Macrium Reflect cont... |
| CVE-2020-25499 | HIGH | 8.8 | 4.2% | Dec 9, 2020 | TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attack... |
| CVE-2020-16600 | HIGH | 7.8 | 0.9% | Dec 9, 2020 | A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page w... |
| CVE-2020-16599 | MEDIUM | 5.5 | 1.0% | Dec 9, 2020 | A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed... |
| CVE-2020-16598 | — | — | — | Dec 9, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-16593 | MEDIUM | 5.5 | 1.2% | Dec 9, 2020 | A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed... |
| CVE-2020-16592 | MEDIUM | 5.5 | 1.0% | Dec 9, 2020 | A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_... |
| CVE-2020-16591 | MEDIUM | 5.5 | 0.9% | Dec 9, 2020 | A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read... |
| CVE-2020-16590 | MEDIUM | 5.5 | 0.9% | Dec 9, 2020 | A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_... |
| CVE-2020-16589 | MEDIUM | 5.5 | 1.1% | Dec 9, 2020 | A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.... |
| CVE-2020-16588 | MEDIUM | 5.5 | 1.2% | Dec 9, 2020 | A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp... |
| CVE-2020-16587 | MEDIUM | 5.5 | 1.2% | Dec 9, 2020 | A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruct... |
| CVE-2020-28086 | HIGH | 7.5 | 0.6% | Dec 9, 2020 | pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user... |
| CVE-2020-26257 | MEDIUM | 6.5 | 2.4% | Dec 9, 2020 | Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now