2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5227 | HIGH | 7.5 | 1.6% | Jan 28, 2020 | Feedgen (python feedgen) before 0.9.0 is susceptible to XML Denial of Service attacks. The *feedgen* library allows supp... |
| CVE-2020-5215 | HIGH | 7.5 | 0.6% | Jan 28, 2020 | In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 value results in a segmentation... |
| CVE-2020-8420 | HIGH | 8.8 | 0.8% | Jan 28, 2020 | An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of com_templates cause... |
| CVE-2020-8419 | HIGH | 8.8 | 0.5% | Jan 28, 2020 | An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components cause ... |
| CVE-2020-8417 | HIGH | 8.8 | 10.4% | Jan 28, 2020 | The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import me... |
| CVE-2020-8112 | HIGH | 8.8 | 3.6% | Jan 28, 2020 | opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in th... |
| CVE-2020-5210 | HIGH | 7.8 | 0.8% | Jan 28, 2020 | In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a cr... |
| CVE-2020-5209 | HIGH | 7.8 | 0.8% | Jan 28, 2020 | In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or re... |
| CVE-2020-1940 | HIGH | 7.5 | 4.5% | Jan 28, 2020 | The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 a... |
| CVE-2020-7799 | HIGH | 7.2 | 19.8% | Jan 28, 2020 | An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Se... |
| CVE-2020-5523 | HIGH | 7.4 | 1.2% | Jan 28, 2020 | Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificat... |
| CVE-2020-7998 | HIGH | 8.8 | 1.5% | Jan 28, 2020 | An arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1 for iOS. The vulnerabili... |
| CVE-2020-5207 | HIGH | 7.5 | 0.8% | Jan 27, 2020 | In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and T... |
| CVE-2020-7952 | HIGH | 7.8 | 1.9% | Jan 27, 2020 | rendersystemdx9.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service ... |
| CVE-2020-7951 | HIGH | 7.8 | 1.9% | Jan 27, 2020 | meshsystem.dll in Valve Dota 2 before 7.23e allows remote attackers to achieve code execution or denial of service by cr... |
| CVE-2020-7950 | HIGH | 7.8 | 1.9% | Jan 27, 2020 | meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by cr... |
| CVE-2020-7949 | HIGH | 7.8 | 4.2% | Jan 27, 2020 | schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by ... |
| CVE-2020-7238 | HIGH | 7.5 | 3.6% | Jan 27, 2020 | Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Tr... |
| CVE-2020-8009 | HIGH | 7.5 | 1.7% | Jan 27, 2020 | AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file. |
| CVE-2020-5522 | HIGH | 7.4 | 0.5% | Jan 27, 2020 | The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-... |
| CVE-2020-5521 | HIGH | 7.4 | 0.5% | Jan 27, 2020 | The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-t... |
| CVE-2020-5520 | HIGH | 7.4 | 0.5% | Jan 27, 2020 | The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-midd... |
| CVE-2020-7991 | HIGH | 8.8 | 3.1% | Jan 26, 2020 | Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password. |
| CVE-2020-7984 | HIGH | 7.5 | 2.5% | Jan 26, 2020 | SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain ad... |
| CVE-2020-3142 | HIGH | 7.5 | 1.5% | Jan 26, 2020 | A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now