2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13260 | MEDIUM | 6.1 | 2.0% | Sep 17, 2020 | A vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could allow an authenticated ... |
| CVE-2020-25216 | CRITICAL | 9.8 | 2.4% | Sep 17, 2020 | yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction w... |
| CVE-2020-25215 | CRITICAL | 9.8 | 1.2% | Sep 17, 2020 | yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document. |
| CVE-2020-24750 | HIGH | 8.1 | 7.3% | Sep 17, 2020 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-0435 | — | — | — | Sep 17, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of ... |
| CVE-2020-0434 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to l... |
| CVE-2020-0433 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could le... |
| CVE-2020-0432 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to ... |
| CVE-2020-0431 | MEDIUM | 6.7 | 0.2% | Sep 17, 2020 | In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to ... |
| CVE-2020-0430 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could l... |
| CVE-2020-0429 | MEDIUM | 6.7 | 0.2% | Sep 17, 2020 | In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free... |
| CVE-2020-0428 | MEDIUM | 6.4 | 0.1% | Sep 17, 2020 | In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privile... |
| CVE-2020-0427 | MEDIUM | 5.5 | 0.5% | Sep 17, 2020 | In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local in... |
| CVE-2020-0403 | MEDIUM | 6.7 | 0.2% | Sep 17, 2020 | In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This c... |
| CVE-2020-0387 | HIGH | 7.8 | 0.5% | Sep 17, 2020 | In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. Th... |
| CVE-2020-25729 | MEDIUM | 6.1 | 1.2% | Sep 17, 2020 | ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php. |
| CVE-2020-25489 | CRITICAL | 9.8 | 2.5% | Sep 17, 2020 | A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploi... |
| CVE-2020-24753 | CRITICAL | 9.8 | 2.6% | Sep 17, 2020 | A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow a... |
| CVE-2020-13169 | CRITICAL | 9 | 2.2% | Sep 17, 2020 | Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and p... |
| CVE-2020-25728 | HIGH | 8.8 | 1.0% | Sep 17, 2020 | The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malici... |
| CVE-2020-25727 | HIGH | 7.5 | 0.9% | Sep 17, 2020 | The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to in... |
| CVE-2020-25490 | HIGH | 7.3 | 1.2% | Sep 17, 2020 | Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote att... |
| CVE-2020-24046 | HIGH | 7.2 | 3.4% | Sep 17, 2020 | A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell,... |
| CVE-2020-24045 | HIGH | 7.2 | 1.6% | Sep 17, 2020 | A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell,... |
| CVE-2020-11804 | HIGH | 8.8 | 7.1% | Sep 17, 2020 | An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page ma... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now