2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-29367 | HIGH | 7.8 | 1.2% | Nov 27, 2020 | blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write ... |
| CVE-2020-26245 | CRITICAL | 9.8 | 1.9% | Nov 27, 2020 | npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. T... |
| CVE-2020-28922 | HIGH | 8.8 | 0.7% | Nov 27, 2020 | An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL fun... |
| CVE-2020-28921 | HIGH | 8.8 | 0.6% | Nov 27, 2020 | An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL fun... |
| CVE-2020-27746 | LOW | 3.7 | 0.8% | Nov 27, 2020 | Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X1... |
| CVE-2020-25708 | HIGH | 7.5 | 1.6% | Nov 27, 2020 | A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a speci... |
| CVE-2020-25014 | CRITICAL | 9.8 | 4.3% | Nov 27, 2020 | A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4... |
| CVE-2020-10772 | HIGH | 7.5 | 1.3% | Nov 27, 2020 | An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020... |
| CVE-2020-7780 | HIGH | 8.8 | 0.6% | Nov 27, 2020 | This affects the package com.softwaremill.akka-http-session:core_2.13 before 0.5.11; the package com.softwaremill.akka-h... |
| CVE-2020-27745 | CRITICAL | 9.8 | 2.4% | Nov 27, 2020 | Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin. |
| CVE-2020-29138 | MEDIUM | 5.3 | 1.1% | Nov 27, 2020 | Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, all... |
| CVE-2020-25738 | MEDIUM | 5.5 | 0.4% | Nov 27, 2020 | CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism ... |
| CVE-2020-29145 | MEDIUM | 5.4 | 0.5% | Nov 27, 2020 | In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS v... |
| CVE-2020-29144 | MEDIUM | 5.4 | 0.5% | Nov 27, 2020 | In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via... |
| CVE-2020-29137 | MEDIUM | 6.1 | 0.6% | Nov 27, 2020 | cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface (SEC-577). |
| CVE-2020-29136 | MEDIUM | 6.5 | 1.2% | Nov 27, 2020 | In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575). |
| CVE-2020-29135 | MEDIUM | 4.1 | 0.6% | Nov 27, 2020 | cPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567). |
| CVE-2020-29133 | MEDIUM | 6.1 | 1.1% | Nov 27, 2020 | jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename... |
| CVE-2020-12262 | MEDIUM | 5.4 | 1.5% | Nov 27, 2020 | Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= ... |
| CVE-2020-29130 | MEDIUM | 4.3 | 1.8% | Nov 26, 2020 | slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even i... |
| CVE-2020-29129 | MEDIUM | 4.3 | 1.4% | Nov 26, 2020 | ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if... |
| CVE-2020-26936 | HIGH | 8.8 | 0.4% | Nov 26, 2020 | Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack. |
| CVE-2020-29043 | HIGH | 7.5 | 1.4% | Nov 26, 2020 | An issue was discovered in BigBlueButton through 2.2.29. When at attacker is able to view an account_activations/edit?to... |
| CVE-2020-29042 | LOW | 3.7 | 1.1% | Nov 26, 2020 | An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of c... |
| CVE-2020-29065 | — | — | — | Nov 26, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now