2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-23740 | HIGH | 7.8 | 0.3% | Dec 3, 2020 | In DriverGenius 9.61.5480.28 there is a local privilege escalation vulnerability in the driver wizard, attackers can use... |
| CVE-2020-23738 | MEDIUM | 5.5 | 0.4% | Dec 3, 2020 | There is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174. Attackers can use a construct... |
| CVE-2020-23736 | MEDIUM | 5.5 | 0.4% | Dec 3, 2020 | There is a local denial of service vulnerability in DaDa accelerator 5.6.19.816,, attackers can use constructed programs... |
| CVE-2020-17527 | HIGH | 7.5 | 24.6% | Dec 3, 2020 | While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 ... |
| CVE-2020-28175 | HIGH | 7.8 | 0.5% | Dec 3, 2020 | There is a local privilege escalation vulnerability in Alfredo Milani Comparetti SpeedFan 4.52. Attackers can use constr... |
| CVE-2020-23727 | MEDIUM | 5.5 | 0.4% | Dec 3, 2020 | There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attac... |
| CVE-2020-23726 | MEDIUM | 5.5 | 0.3% | Dec 3, 2020 | There is a local denial of service vulnerability in Wise Care 365 5.5.4, attackers can cause computer crash (BSOD). |
| CVE-2020-13525 | HIGH | 8.8 | 1.7% | Dec 3, 2020 | The sort parameter in the download page /sysworkflow/en/neoclassic/reportTables/reportTables_Ajax is vulnerable to SQL i... |
| CVE-2020-13524 | MEDIUM | 5.5 | 0.8% | Dec 3, 2020 | An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD f... |
| CVE-2020-28923 | LOW | 2.7 | 1.0% | Dec 3, 2020 | An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead... |
| CVE-2020-28251 | HIGH | 8.1 | 1.2% | Dec 3, 2020 | NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be... |
| CVE-2020-27783 | MEDIUM | 6.1 | 3.9% | Dec 3, 2020 | A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, ... |
| CVE-2020-27778 | HIGH | 7.5 | 2.2% | Dec 3, 2020 | A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this ... |
| CVE-2020-27764 | LOW | 3.3 | 1.1% | Dec 3, 2020 | In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ss... |
| CVE-2020-27763 | LOW | 3.3 | 0.9% | Dec 3, 2020 | A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by Imag... |
| CVE-2020-27762 | MEDIUM | 5.5 | 1.1% | Dec 3, 2020 | A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick... |
| CVE-2020-27761 | LOW | 3.3 | 1.1% | Dec 3, 2020 | WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outsid... |
| CVE-2020-27760 | MEDIUM | 5.5 | 1.4% | Dec 3, 2020 | In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero co... |
| CVE-2020-27759 | LOW | 3.3 | 1.1% | Dec 3, 2020 | In IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and returned, which in some case... |
| CVE-2020-25711 | MEDIUM | 6.5 | 1.1% | Dec 3, 2020 | A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server... |
| CVE-2020-25693 | HIGH | 8.1 | 1.5% | Dec 3, 2020 | A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() ca... |
| CVE-2020-25649 | HIGH | 7.5 | 17.3% | Dec 3, 2020 | A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allow... |
| CVE-2020-23735 | HIGH | 7.8 | 0.3% | Dec 3, 2020 | In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constru... |
| CVE-2020-14381 | HIGH | 7.8 | 0.8% | Dec 3, 2020 | A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory ... |
| CVE-2020-14351 | HIGH | 7.8 | 0.3% | Dec 3, 2020 | A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local atta... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now