2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36373 | MEDIUM | 5.5 | 0.8% | May 28, 2021 | Stack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (D... |
| CVE-2020-36372 | MEDIUM | 5.5 | 0.8% | May 28, 2021 | Stack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Servic... |
| CVE-2020-36371 | MEDIUM | 5.5 | 0.8% | May 28, 2021 | Stack overflow vulnerability in parse_mul_div_rem Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Servi... |
| CVE-2020-36370 | MEDIUM | 5.5 | 0.8% | May 28, 2021 | Stack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (Do... |
| CVE-2020-36369 | MEDIUM | 5.5 | 0.8% | May 28, 2021 | Stack overflow vulnerability in parse_statement_list Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Se... |
| CVE-2020-36368 | MEDIUM | 5.5 | 0.8% | May 28, 2021 | Stack overflow vulnerability in parse_statement Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service... |
| CVE-2020-36367 | MEDIUM | 5.5 | 0.8% | May 28, 2021 | Stack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (Do... |
| CVE-2020-36366 | MEDIUM | 5.5 | 0.8% | May 28, 2021 | Stack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (Do... |
| CVE-2020-18392 | MEDIUM | 5.5 | 0.9% | May 28, 2021 | Stack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (Do... |
| CVE-2020-26642 | MEDIUM | 6.1 | 0.7% | May 28, 2021 | A cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS version 11 which allows an at... |
| CVE-2020-1729 | MEDIUM | 4.4 | 0.3% | May 28, 2021 | A flaw was found in SmallRye's API through version 1.6.1. The API can allow other code running within the application se... |
| CVE-2020-35506 | MEDIUM | 6.7 | 0.4% | May 28, 2021 | A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.... |
| CVE-2020-35505 | MEDIUM | 4.4 | 0.3% | May 28, 2021 | A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0... |
| CVE-2020-35504 | MEDIUM | 6 | 0.3% | May 28, 2021 | A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allo... |
| CVE-2020-27826 | MEDIUM | 4.2 | 0.6% | May 28, 2021 | A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using A... |
| CVE-2020-25715 | MEDIUM | 6.1 | 1.1% | May 28, 2021 | A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scri... |
| CVE-2020-1761 | MEDIUM | 6.1 | 0.6% | May 27, 2021 | A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attac... |
| CVE-2020-1701 | MEDIUM | 6.5 | 0.7% | May 27, 2021 | A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handl... |
| CVE-2020-14327 | MEDIUM | 5.5 | 0.2% | May 27, 2021 | A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Function... |
| CVE-2020-14301 | MEDIUM | 6.5 | 1.2% | May 27, 2021 | An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access netwo... |
| CVE-2020-22033 | MEDIUM | 6.5 | 1.5% | May 27, 2021 | A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which... |
| CVE-2020-10774 | MEDIUM | 5.5 | 0.3% | May 27, 2021 | A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when rea... |
| CVE-2020-10729 | MEDIUM | 5.5 | 0.4% | May 27, 2021 | A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length g... |
| CVE-2020-10716 | MEDIUM | 6.5 | 0.8% | May 27, 2021 | A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the ... |
| CVE-2020-10701 | MEDIUM | 6.5 | 0.9% | May 27, 2021 | A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response timeout. This... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now