2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-21831 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:... |
| CVE-2020-18198 | HIGH | 8.8 | 0.9% | May 17, 2021 | Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete speci... |
| CVE-2020-18195 | HIGH | 8.8 | 0.9% | May 17, 2021 | Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete a spe... |
| CVE-2020-21841 | HIGH | 8.8 | 1.4% | May 17, 2021 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135. |
| CVE-2020-21840 | HIGH | 8.8 | 1.4% | May 17, 2021 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985. |
| CVE-2020-21838 | HIGH | 8.8 | 1.4% | May 17, 2021 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:... |
| CVE-2020-21836 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:... |
| CVE-2020-21833 | HIGH | 8.8 | 1.4% | May 17, 2021 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:... |
| CVE-2020-21832 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode... |
| CVE-2020-21830 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213. |
| CVE-2020-21827 | HIGH | 7.8 | 1.0% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode... |
| CVE-2020-21819 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51. |
| CVE-2020-21818 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48. |
| CVE-2020-21816 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46. |
| CVE-2020-21814 | HIGH | 8.8 | 1.2% | May 17, 2021 | A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97. |
| CVE-2020-21813 | HIGH | 7.8 | 1.0% | May 17, 2021 | A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114. |
| CVE-2020-27833 | HIGH | 7.1 | 1.7% | May 14, 2021 | A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by us... |
| CVE-2020-24119 | HIGH | 7.1 | 1.1% | May 14, 2021 | A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect. |
| CVE-2020-4985 | HIGH | 7.5 | 1.0% | May 14, 2021 | IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameter... |
| CVE-2020-27185 | HIGH | 7.5 | 0.7% | May 14, 2021 | Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully ex... |
| CVE-2020-27150 | HIGH | 7.5 | 1.1% | May 14, 2021 | In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of... |
| CVE-2020-27020 | HIGH | 7.5 | 0.7% | May 14, 2021 | Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially all... |
| CVE-2020-23996 | HIGH | 8.8 | 2.3% | May 13, 2021 | A local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote authenticated attackers to exe... |
| CVE-2020-27823 | HIGH | 7.8 | 1.1% | May 13, 2021 | A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJ... |
| CVE-2020-21342 | HIGH | 7.5 | 1.2% | May 13, 2021 | Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now