2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27663 | MEDIUM | 4.3 | 0.9% | Nov 26, 2020 | In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows... |
| CVE-2020-27662 | MEDIUM | 4.3 | 0.7% | Nov 26, 2020 | In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an atta... |
| CVE-2020-27207 | HIGH | 7.5 | 1.6% | Nov 26, 2020 | Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite... |
| CVE-2020-13886 | MEDIUM | 5.3 | 4.3% | Nov 26, 2020 | Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?pag... |
| CVE-2020-7779 | HIGH | 7.5 | 1.7% | Nov 26, 2020 | All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted in... |
| CVE-2020-7778 | HIGH | 7.3 | 2.4% | Nov 26, 2020 | This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an ... |
| CVE-2020-29128 | CRITICAL | 9.8 | 2.3% | Nov 26, 2020 | petl before 1.68, in some configurations, allows resolution of entities in an XML document. |
| CVE-2020-27255 | HIGH | 7.5 | 3.2% | Nov 26, 2020 | A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a re... |
| CVE-2020-27253 | HIGH | 7.5 | 1.6% | Nov 26, 2020 | A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could ... |
| CVE-2020-27251 | CRITICAL | 9.8 | 5.5% | Nov 26, 2020 | A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a re... |
| CVE-2020-25653 | MEDIUM | 6.3 | 0.3% | Nov 26, 2020 | A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw ... |
| CVE-2020-25652 | MEDIUM | 5.5 | 0.4% | Nov 26, 2020 | A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be establish... |
| CVE-2020-25651 | MEDIUM | 6.4 | 0.3% | Nov 26, 2020 | A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in t... |
| CVE-2020-29074 | HIGH | 8.8 | 1.7% | Nov 25, 2020 | scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user. |
| CVE-2020-14190 | HIGH | 7.5 | 1.2% | Nov 25, 2020 | Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-suppl... |
| CVE-2020-14191 | HIGH | 7.5 | 1.2% | Nov 25, 2020 | Affected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the application's availability via a De... |
| CVE-2020-29070 | MEDIUM | 4.8 | 1.1% | Nov 25, 2020 | osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of n... |
| CVE-2020-26243 | HIGH | 7.5 | 2.6% | Nov 25, 2020 | Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding speci... |
| CVE-2020-26212 | MEDIUM | 6.5 | 1.2% | Nov 25, 2020 | GLPI stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package, that ... |
| CVE-2020-25650 | MEDIUM | 5.5 | 0.5% | Nov 25, 2020 | A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine... |
| CVE-2020-29072 | MEDIUM | 6.1 | 0.7% | Nov 25, 2020 | A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19. This client-side attack requires use... |
| CVE-2020-29071 | CRITICAL | 9 | 1.6% | Nov 25, 2020 | An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19. The issue arises from the insecure rendering ... |
| CVE-2020-26242 | HIGH | 7.5 | 1.5% | Nov 25, 2020 | Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.18, t... |
| CVE-2020-26241 | HIGH | 7.1 | 1.1% | Nov 25, 2020 | Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerabilit... |
| CVE-2020-26240 | HIGH | 7.5 | 1.6% | Nov 25, 2020 | Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now