2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5852 | HIGH | 7.5 | 1.2% | Jan 14, 2020 | Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel (TMM). Thi... |
| CVE-2020-5196 | HIGH | 8.1 | 1.2% | Jan 14, 2020 | Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create f... |
| CVE-2020-6949 | HIGH | 8.8 | 1.3% | Jan 13, 2020 | A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can ... |
| CVE-2020-5390 | HIGH | 7.5 | 1.2% | Jan 13, 2020 | PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is ef... |
| CVE-2020-6860 | HIGH | 8.8 | 1.7% | Jan 13, 2020 | libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header mess... |
| CVE-2020-6851 | HIGH | 7.5 | 5.0% | Jan 13, 2020 | OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack ... |
| CVE-2020-6377 | HIGH | 8.8 | 1.5% | Jan 10, 2020 | Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap co... |
| CVE-2020-6757 | HIGH | 8.8 | 1.4% | Jan 9, 2020 | contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows authenticated attackers t... |
| CVE-2020-5504 | HIGH | 8.8 | 38.8% | Jan 9, 2020 | In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could ... |
| CVE-2020-6168 | HIGH | 7.6 | 2.0% | Jan 9, 2020 | A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with bas... |
| CVE-2020-6167 | HIGH | 8.8 | 0.9% | Jan 9, 2020 | A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable main... |
| CVE-2020-1925 | HIGH | 7.5 | 2.8% | Jan 9, 2020 | Apache Olingo versions 4.0.0 to 4.7.0 provide the AsyncRequestWrapperImpl class which reads a URL from the Location head... |
| CVE-2020-6628 | HIGH | 8.8 | 1.5% | Jan 9, 2020 | Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c. |
| CVE-2020-6625 | HIGH | 7.1 | 1.4% | Jan 9, 2020 | jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c. |
| CVE-2020-6624 | HIGH | 7.1 | 1.4% | Jan 9, 2020 | jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c. |
| CVE-2020-6623 | HIGH | 8.8 | 1.5% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index. |
| CVE-2020-6622 | HIGH | 8.8 | 1.4% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8. |
| CVE-2020-6621 | HIGH | 8.8 | 1.1% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT. |
| CVE-2020-6620 | HIGH | 8.8 | 1.1% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8. |
| CVE-2020-6619 | HIGH | 8.8 | 1.1% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek. |
| CVE-2020-6618 | HIGH | 8.8 | 1.1% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table. |
| CVE-2020-6617 | HIGH | 8.8 | 1.1% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int. |
| CVE-2020-6614 | HIGH | 8.1 | 1.7% | Jan 8, 2020 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c. |
| CVE-2020-6613 | HIGH | 8.1 | 1.7% | Jan 8, 2020 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c. |
| CVE-2020-6612 | HIGH | 8.1 | 1.7% | Jan 8, 2020 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now