2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13382 | CRITICAL | 9.1 | 52.8% | Jul 1, 2020 | openSIS through 7.4 has Incorrect Access Control. |
| CVE-2020-13381 | CRITICAL | 9.8 | 59.0% | Jul 1, 2020 | openSIS through 7.4 allows SQL Injection. |
| CVE-2020-13380 | CRITICAL | 9.8 | 2.4% | Jul 1, 2020 | openSIS before 7.4 allows SQL Injection. |
| CVE-2020-12605 | HIGH | 7.5 | 1.4% | Jul 1, 2020 | Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers... |
| CVE-2020-12604 | HIGH | 7.5 | 1.7% | Jul 1, 2020 | Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 cli... |
| CVE-2020-7689 | HIGH | 7.5 | 0.8% | Jul 1, 2020 | Data is truncated wrong when its length is greater than 255 bytes. |
| CVE-2020-5900 | HIGH | 8.8 | 0.5% | Jul 1, 2020 | In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for... |
| CVE-2020-12603 | HIGH | 7.5 | 1.4% | Jul 1, 2020 | Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or... |
| CVE-2020-6261 | MEDIUM | 5.3 | 0.8% | Jul 1, 2020 | SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to perform a log injection into the trace file, ... |
| CVE-2020-15478 | HIGH | 7.5 | 4.7% | Jul 1, 2020 | The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors. |
| CVE-2020-15476 | HIGH | 7.5 | 2.1% | Jul 1, 2020 | In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protoc... |
| CVE-2020-15475 | CRITICAL | 9.8 | 1.2% | Jul 1, 2020 | In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-aft... |
| CVE-2020-15474 | CRITICAL | 9.8 | 1.2% | Jul 1, 2020 | In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c. |
| CVE-2020-15473 | CRITICAL | 9.1 | 1.3% | Jul 1, 2020 | In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/... |
| CVE-2020-15472 | CRITICAL | 9.1 | 1.5% | Jul 1, 2020 | In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/proto... |
| CVE-2020-15471 | CRITICAL | 9.1 | 1.3% | Jul 1, 2020 | In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_in... |
| CVE-2020-15470 | MEDIUM | 5.5 | 0.7% | Jul 1, 2020 | ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfif_decode in jfif.c. |
| CVE-2020-15468 | CRITICAL | 9.8 | 2.7% | Jul 1, 2020 | Persian VIP Download Script 1.0 allows SQL Injection via the cart_edit.php active parameter. |
| CVE-2020-4029 | MEDIUM | 4.3 | 1.4% | Jul 1, 2020 | The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, fro... |
| CVE-2020-4027 | MEDIUM | 4.7 | 1.5% | Jul 1, 2020 | Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration per... |
| CVE-2020-4025 | MEDIUM | 4.8 | 0.9% | Jul 1, 2020 | The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian ... |
| CVE-2020-4024 | MEDIUM | 5.4 | 0.9% | Jul 1, 2020 | The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and... |
| CVE-2020-4022 | MEDIUM | 6.1 | 1.1% | Jul 1, 2020 | The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and... |
| CVE-2020-14169 | MEDIUM | 6.1 | 0.8% | Jul 1, 2020 | The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbit... |
| CVE-2020-14168 | MEDIUM | 5.9 | 1.7% | Jul 1, 2020 | The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now