2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0120 | HIGH | 7.8 | 0.2% | Jul 17, 2020 | In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overfl... |
| CVE-2020-1655 | MEDIUM | 5.3 | 1.0% | Jul 17, 2020 | When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configur... |
| CVE-2020-1654 | CRITICAL | 9.8 | 2.2% | Jul 17, 2020 | On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a m... |
| CVE-2020-1653 | HIGH | 7.5 | 1.6% | Jul 17, 2020 | On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine (RE) may cause mbuf leak which ... |
| CVE-2020-1652 | CRITICAL | 9.8 | 0.7% | Jul 17, 2020 | OpenNMS is accessible via port 9443 |
| CVE-2020-1651 | MEDIUM | 6.5 | 0.5% | Jul 17, 2020 | On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the p... |
| CVE-2020-1650 | HIGH | 7.5 | 1.0% | Jul 17, 2020 | On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the ... |
| CVE-2020-1649 | HIGH | 7.5 | 1.1% | Jul 17, 2020 | When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configur... |
| CVE-2020-1648 | HIGH | 7.5 | 1.3% | Jul 17, 2020 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing proces... |
| CVE-2020-1647 | CRITICAL | 9.8 | 2.6% | Jul 17, 2020 | On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, a double free ... |
| CVE-2020-1646 | HIGH | 7.5 | 1.0% | Jul 17, 2020 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a r... |
| CVE-2020-1645 | HIGH | 8.3 | 0.6% | Jul 17, 2020 | When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-M... |
| CVE-2020-1644 | HIGH | 7.5 | 1.3% | Jul 17, 2020 | On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an interna... |
| CVE-2020-1643 | MEDIUM | 5.5 | 0.3% | Jul 17, 2020 | Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks devi... |
| CVE-2020-1641 | MEDIUM | 6.5 | 0.4% | Jul 17, 2020 | A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to cras... |
| CVE-2020-1640 | HIGH | 7.5 | 1.4% | Jul 17, 2020 | An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD (rout... |
| CVE-2020-15813 | HIGH | 8.1 | 0.8% | Jul 17, 2020 | Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers. It allows use of an external user/group database... |
| CVE-2020-5131 | HIGH | 7.8 | 0.5% | Jul 17, 2020 | SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite... |
| CVE-2020-5130 | MEDIUM | 5.3 | 1.3% | Jul 17, 2020 | SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper va... |
| CVE-2020-15497 | MEDIUM | 6.1 | 1.3% | Jul 17, 2020 | jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is a... |
| CVE-2020-7826 | CRITICAL | 9.8 | 0.7% | Jul 17, 2020 | EyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be ... |
| CVE-2020-7825 | CRITICAL | 9.8 | 2.1% | Jul 17, 2020 | A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05... |
| CVE-2020-15807 | MEDIUM | 6.5 | 1.5% | Jul 17, 2020 | GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files. |
| CVE-2020-15586 | MEDIUM | 5.9 | 2.9% | Jul 17, 2020 | Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.Rev... |
| CVE-2020-14928 | MEDIUM | 5.9 | 2.8% | Jul 17, 2020 | evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server send... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now