2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-22741 | HIGH | 7.5 | 0.8% | Jul 19, 2021 | An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after ... |
| CVE-2020-36426 | HIGH | 7.5 | 1.7% | Jul 19, 2021 | An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte). |
| CVE-2020-36423 | HIGH | 7.5 | 1.2% | Jul 19, 2021 | An issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext because a certain Lucky 1... |
| CVE-2020-22650 | HIGH | 7.5 | 1.1% | Jul 19, 2021 | A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service (DOS) via a system cras... |
| CVE-2020-11634 | HIGH | 7.8 | 0.5% | Jul 15, 2021 | The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configur... |
| CVE-2020-11632 | HIGH | 7.8 | 0.3% | Jul 15, 2021 | The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversa... |
| CVE-2020-12734 | HIGH | 8.1 | 0.9% | Jul 15, 2021 | DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment ... |
| CVE-2020-12733 | HIGH | 7.5 | 1.3% | Jul 15, 2021 | Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET... |
| CVE-2020-25736 | HIGH | 7.8 | 2.2% | Jul 15, 2021 | Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC... |
| CVE-2020-15495 | HIGH | 7.8 | 0.3% | Jul 15, 2021 | Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service ... |
| CVE-2020-12731 | HIGH | 7.5 | 0.7% | Jul 15, 2021 | The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whe... |
| CVE-2020-15496 | HIGH | 7.8 | 0.2% | Jul 15, 2021 | Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions. |
| CVE-2020-36420 | HIGH | 7.5 | 1.9% | Jul 15, 2021 | Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a mal... |
| CVE-2020-29157 | HIGH | 7.8 | 0.5% | Jul 14, 2021 | An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when the service or system ... |
| CVE-2020-29147 | HIGH | 7.5 | 1.1% | Jul 14, 2021 | A SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows attackers to obtain sensitiv... |
| CVE-2020-25445 | HIGH | 7.8 | 0.9% | Jul 14, 2021 | The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input ... |
| CVE-2020-0417 | HIGH | 7.8 | 0.1% | Jul 14, 2021 | In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable Pend... |
| CVE-2020-22907 | HIGH | 7.5 | 1.6% | Jul 13, 2021 | Stack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18, allows remote attackers to cause a Den... |
| CVE-2020-22886 | HIGH | 7.5 | 1.6% | Jul 13, 2021 | Buffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to caus... |
| CVE-2020-22885 | HIGH | 7.5 | 1.6% | Jul 13, 2021 | Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to... |
| CVE-2020-22882 | HIGH | 7.5 | 1.2% | Jul 13, 2021 | Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via a crafted... |
| CVE-2020-22876 | HIGH | 7.5 | 1.6% | Jul 13, 2021 | Buffer Overflow vulnerability in quickjs.c in QuickJS, allows remote attackers to cause denial of service. This issue is... |
| CVE-2020-28400 | HIGH | 7.5 | 1.9% | Jul 13, 2021 | Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service conditio... |
| CVE-2020-19907 | HIGH | 8.8 | 3.0% | Jul 12, 2021 | A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to e... |
| CVE-2020-23079 | HIGH | 7.5 | 1.2% | Jul 12, 2021 | SSRF vulnerability in Halo <=1.3.2 exists in the SMTP configuration, which can detect the server intranet. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now