2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6609 | HIGH | 8.8 | 1.8% | Jan 8, 2020 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c. |
| CVE-2020-0002 | HIGH | 8.8 | 1.4% | Jan 8, 2020 | In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead... |
| CVE-2020-0001 | HIGH | 7.8 | 0.4% | Jan 8, 2020 | In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to loc... |
| CVE-2020-5511 | HIGH | 8.8 | 1.7% | Jan 8, 2020 | PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administ... |
| CVE-2020-5183 | HIGH | 7.5 | 2.0% | Jan 8, 2020 | FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string ... |
| CVE-2020-5846 | HIGH | 8.8 | 1.4% | Jan 6, 2020 | An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm... |
| CVE-2020-5204 | HIGH | 8.8 | 1.1% | Jan 6, 2020 | In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer tha... |
| CVE-2020-5515 | HIGH | 7.2 | 26.5% | Jan 6, 2020 | Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection. |
| CVE-2020-5840 | HIGH | 7.5 | 1.5% | Jan 6, 2020 | An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach ... |
| CVE-2020-5192 | HIGH | 8.8 | 16.8% | Jan 6, 2020 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages an... |
| CVE-2020-5496 | HIGH | 8.8 | 2.4% | Jan 3, 2020 | FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c. |
| CVE-2020-5395 | HIGH | 8.8 | 2.5% | Jan 3, 2020 | FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c. |
| CVE-2020-1871 | HIGH | 8.2 | 0.6% | Jan 3, 2020 | USG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100; ... |
| CVE-2020-5313 | HIGH | 7.1 | 2.8% | Jan 3, 2020 | libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. |
| CVE-2020-5310 | HIGH | 8.8 | 2.0% | Jan 3, 2020 | libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc. |
| CVE-2020-5179 | HIGH | 7.2 | 2.8% | Jan 2, 2020 | Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by nav... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now