2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-18652MEDIUM6.5Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial ...
CVE-2020-18651MEDIUM6.5Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remo...
CVE-2020-18494HIGH8.8Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary cod...
CVE-2020-18382MEDIUM6.5Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38....
CVE-2020-18378MEDIUM6.5A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38....
CVE-2020-18232HIGH8.8Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary cod...
CVE-2020-28715CRITICAL9.8An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to exe...
CVE-2020-26037CRITICAL9.8Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows re...
CVE-2020-36615HIGH7.8An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1. Processi...
CVE-2020-36138HIGH7.5An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a d...
CVE-2020-36136HIGH7.5SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendma...
CVE-2020-36082CRITICAL9.8File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate ...
CVE-2020-36037HIGH8.8An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting para...
CVE-2020-36034CRITICAL9.8SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute...
CVE-2020-36024MEDIUM5.5An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (Do...
CVE-2020-36023MEDIUM6.5An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (Do...
CVE-2020-35990MEDIUM5.5Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader ver...
CVE-2020-35141HIGH7.5An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers t...
CVE-2020-35139HIGH7.5An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to caus...
CVE-2020-28849MEDIUM5.4Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code an...
CVE-2020-28848HIGH8.8CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CS...
CVE-2020-28840HIGH7.8Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbi...
CVE-2020-28717MEDIUM6.1Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows...
CVE-2020-27544CRITICAL9.8An issue was discovered in FoldingAtHome Client Advanced Control GUI before commit 9b619ae64443997948a36dda01b420578de1a...
CVE-2020-27514CRITICAL9.1Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows rem...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now