2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-18171HIGH8.8TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed cr...
CVE-2020-18169HIGH7.8A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate ...
CVE-2020-12681HIGH7.5Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/co...
CVE-2020-22284HIGH7.5A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and...
CVE-2020-22283HIGH7.5A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation l...
CVE-2020-7389HIGH7.2Sage X3 System CHAINE Variable Script Command Injection. An authenticated user with developer access can pass OS command...
CVE-2020-5316HIGH7.8Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home...
CVE-2020-19499HIGH8.8An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Servic...
CVE-2020-19498HIGH8.8Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibl...
CVE-2020-19497HIGH8.8Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows...
CVE-2020-19492HIGH7.8There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input wil...
CVE-2020-19491HIGH7.8There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will...
CVE-2020-23283HIGH7.5Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from...
CVE-2020-23282HIGH7.5SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with...
CVE-2020-21934HIGH7.5An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the S...
CVE-2020-21933HIGH7.5An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where the admin password and private k...
CVE-2020-23284HIGH7.5Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in th...
CVE-2020-25206HIGH7.2The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throu...
CVE-2020-15660HIGH8.8Missing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF vulnerability, that might, when...
CVE-2020-36430HIGH7.8libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) ...
CVE-2020-36428HIGH8.8matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called f...
CVE-2020-5323HIGH8.1Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1...
CVE-2020-5321HIGH7.6Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1...
CVE-2020-5320HIGH7.2Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1...
CVE-2020-5315HIGH8.8Dell EMC Repository Manager (DRM) version 3.2 contains a plain-text password storage vulnerability. Proxy server user pa...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now