2020 CVE Vulnerabilities

21,085 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-14326HIGH7.5A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, le...
CVE-2020-10771HIGH7.1A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects ...
CVE-2020-22036HIGH8.8A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might l...
CVE-2020-22035HIGH8.8A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might l...
CVE-2020-26670HIGH8.8A vulnerability has been discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute ...
CVE-2020-26668HIGH8.8A SQL injection vulnerability was discovered in /core/feeds/custom.php in BigTree CMS 4.4.10 and earlier which allows an...
CVE-2020-17541HIGH8.8Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a ...
CVE-2020-4520HIGH8.8IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code that when viewed by the a...
CVE-2020-4300HIGH8.2IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML da...
CVE-2020-1920HIGH7.5A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application t...
CVE-2020-18395HIGH7.5A NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04 which can lead to a denial ...
CVE-2020-26641HIGH8.8A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow an attacker to execute a...
CVE-2020-1716HIGH8.8A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default pas...
CVE-2020-25710HIGH7.5A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet proces...
CVE-2020-10145HIGH7.8The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, su...
CVE-2020-14387HIGH7.4A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnera...
CVE-2020-22034HIGH8.8A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory c...
CVE-2020-22032HIGH8.8A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which migh...
CVE-2020-22027HIGH8.8A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might le...
CVE-2020-22025HIGH8.8A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to m...
CVE-2020-22023HIGH8.8A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, whic...
CVE-2020-22022HIGH8.8A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which mi...
CVE-2020-22017HIGH8.8A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which m...
CVE-2020-22016HIGH8.8A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might l...
CVE-2020-10709HIGH7.1A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower use...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now