2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13132 | MEDIUM | 4.6 | 0.6% | Jul 9, 2020 | An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_g... |
| CVE-2020-13131 | MEDIUM | 4.3 | 0.5% | Jul 9, 2020 | An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-too... |
| CVE-2020-15526 | MEDIUM | 5.9 | 0.5% | Jul 9, 2020 | In Redgate SQL Monitor 7.1.4 through 10.1.6 (inclusive), the scope for disabling some TLS security certificate checks ca... |
| CVE-2020-10756 | MEDIUM | 6.5 | 0.5% | Jul 9, 2020 | An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occ... |
| CVE-2020-13994 | HIGH | 8.8 | 7.4% | Jul 9, 2020 | An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve code execution on the ser... |
| CVE-2020-13993 | HIGH | 7.5 | 2.1% | Jul 9, 2020 | An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A blind time-based SQL injection issue allows remote un... |
| CVE-2020-13992 | MEDIUM | 6.1 | 1.2% | Jul 9, 2020 | An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A Stored XSS issue allows remote unauthenticated attack... |
| CVE-2020-12426 | HIGH | 8.8 | 1.6% | Jul 9, 2020 | Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed ev... |
| CVE-2020-12425 | MEDIUM | 6.5 | 1.4% | Jul 9, 2020 | Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leadi... |
| CVE-2020-12423 | HIGH | 7.8 | 0.4% | Jul 9, 2020 | When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in... |
| CVE-2020-12422 | HIGH | 8.8 | 1.9% | Jul 9, 2020 | In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, r... |
| CVE-2020-12421 | MEDIUM | 6.5 | 1.8% | Jul 9, 2020 | When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were le... |
| CVE-2020-12420 | HIGH | 8.8 | 1.9% | Jul 9, 2020 | When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to me... |
| CVE-2020-12419 | HIGH | 8.8 | 2.3% | Jul 9, 2020 | When processing callbacks that occurred during window flushing in the parent process, the associated window may die; cau... |
| CVE-2020-12418 | MEDIUM | 6.5 | 3.0% | Jul 9, 2020 | Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicio... |
| CVE-2020-12417 | HIGH | 8.8 | 2.7% | Jul 9, 2020 | Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory... |
| CVE-2020-12416 | HIGH | 8.8 | 1.4% | Jul 9, 2020 | A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-... |
| CVE-2020-12415 | MEDIUM | 6.5 | 1.3% | Jul 9, 2020 | When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to... |
| CVE-2020-12414 | MEDIUM | 6.5 | 0.7% | Jul 9, 2020 | IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was bei... |
| CVE-2020-12412 | MEDIUM | 4.3 | 0.8% | Jul 9, 2020 | By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with... |
| CVE-2020-12411 | HIGH | 8.8 | 1.2% | Jul 9, 2020 | Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corru... |
| CVE-2020-12410 | HIGH | 8.8 | 1.5% | Jul 9, 2020 | Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evi... |
| CVE-2020-12409 | HIGH | 8.8 | 1.0% | Jul 9, 2020 | When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This ... |
| CVE-2020-12408 | MEDIUM | 6.5 | 0.8% | Jul 9, 2020 | When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path in... |
| CVE-2020-12407 | MEDIUM | 6.5 | 1.0% | Jul 9, 2020 | Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary G... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now