2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3430 | HIGH | 8.8 | 3.9% | Sep 4, 2020 | A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated... |
| CVE-2020-3365 | MEDIUM | 6.5 | 1.6% | Sep 4, 2020 | A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an auth... |
| CVE-2020-1911 | CRITICAL | 9.8 | 2.0% | Sep 4, 2020 | A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains i... |
| CVE-2020-24941 | HIGH | 7.5 | 1.1% | Sep 4, 2020 | An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some sit... |
| CVE-2020-24940 | HIGH | 7.5 | 1.2% | Sep 4, 2020 | An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in... |
| CVE-2020-24980 | — | — | — | Sep 4, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-24979 | — | — | — | Sep 4, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-24978 | CRITICAL | 9.8 | 1.4% | Sep 4, 2020 | In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca00... |
| CVE-2020-24977 | MEDIUM | 6.5 | 3.0% | Sep 4, 2020 | GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entiti... |
| CVE-2020-24999 | HIGH | 7.8 | 1.1% | Sep 3, 2020 | There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by send... |
| CVE-2020-24996 | HIGH | 7.8 | 1.1% | Sep 3, 2020 | There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can ... |
| CVE-2020-25006 | CRITICAL | 9.8 | 2.3% | Sep 3, 2020 | Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote atta... |
| CVE-2020-25005 | CRITICAL | 9.8 | 2.3% | Sep 3, 2020 | Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to ... |
| CVE-2020-25004 | CRITICAL | 9.8 | 2.3% | Sep 3, 2020 | Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to... |
| CVE-2020-1894 | HIGH | 8.8 | 1.8% | Sep 3, 2020 | A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, Whats... |
| CVE-2020-1891 | CRITICAL | 9.8 | 1.5% | Sep 3, 2020 | A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android ... |
| CVE-2020-1890 | HIGH | 7.5 | 1.4% | Sep 3, 2020 | A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 coul... |
| CVE-2020-1889 | CRITICAL | 10 | 4.8% | Sep 3, 2020 | A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in... |
| CVE-2020-1886 | HIGH | 8.8 | 1.2% | Sep 3, 2020 | A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could hav... |
| CVE-2020-9235 | MEDIUM | 5.5 | 0.2% | Sep 3, 2020 | Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2)... |
| CVE-2020-9083 | LOW | 2.4 | 0.2% | Sep 3, 2020 | HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerabil... |
| CVE-2020-9199 | MEDIUM | 6.8 | 0.8% | Sep 3, 2020 | B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with ... |
| CVE-2020-25125 | HIGH | 7.8 | 1.3% | Sep 3, 2020 | GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other imp... |
| CVE-2020-25124 | MEDIUM | 4.8 | 0.6% | Sep 3, 2020 | The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI. |
| CVE-2020-25123 | MEDIUM | 4.8 | 0.6% | Sep 3, 2020 | The Admin CP in vBulletin 5.6.3 allows XSS via a Smilie Title to Smilies Manager. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now