2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5015 | HIGH | 7.5 | 2.5% | Mar 24, 2021 | IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remo... |
| CVE-2020-24994 | HIGH | 8.8 | 2.6% | Mar 23, 2021 | Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause ... |
| CVE-2020-7346 | HIGH | 7.8 | 0.4% | Mar 23, 2021 | Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, lo... |
| CVE-2020-9213 | HIGH | 7.5 | 0.7% | Mar 22, 2021 | There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling ... |
| CVE-2020-28501 | HIGH | 7.5 | 1.5% | Mar 22, 2021 | This affects the package es6-crawler-detect before 3.1.3. No limitation of user agent string length supplied to regex op... |
| CVE-2020-25097 | HIGH | 8.6 | 8.2% | Mar 19, 2021 | An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trust... |
| CVE-2020-9367 | HIGH | 7.8 | 1.1% | Mar 18, 2021 | The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to DLL Hijacking: dcinvent... |
| CVE-2020-26886 | HIGH | 7.8 | 0.6% | Mar 18, 2021 | Softaculous before 5.5.7 is affected by a code execution vulnerability because of External Initialization of Trusted Var... |
| CVE-2020-26797 | HIGH | 7.5 | 4.2% | Mar 18, 2021 | Mediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib::File_Gxf::ChooseParser_Channel... |
| CVE-2020-35492 | HIGH | 7.8 | 1.1% | Mar 18, 2021 | A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can pro... |
| CVE-2020-27827 | HIGH | 7.5 | 3.2% | Mar 18, 2021 | A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when al... |
| CVE-2020-26155 | HIGH | 7.8 | 0.4% | Mar 18, 2021 | Multiple files and folders in Utimaco SecurityServer 4.20.0.4 and 4.31.1.0. are installed with Read/Write permissions fo... |
| CVE-2020-35455 | HIGH | 7.8 | 0.2% | Mar 17, 2021 | The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Sha... |
| CVE-2020-28873 | HIGH | 7.5 | 0.9% | Mar 17, 2021 | Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user ... |
| CVE-2020-17525 | HIGH | 7.5 | 37.5% | Mar 17, 2021 | Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRela... |
| CVE-2020-13924 | HIGH | 7.5 | 4.0% | Mar 17, 2021 | In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and trav... |
| CVE-2020-11309 | HIGH | 7.8 | 0.2% | Mar 17, 2021 | Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in S... |
| CVE-2020-11290 | HIGH | 7 | 0.2% | Mar 17, 2021 | Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon ... |
| CVE-2020-11228 | HIGH | 7.8 | 0.2% | Mar 17, 2021 | Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapd... |
| CVE-2020-11226 | HIGH | 7.5 | 0.9% | Mar 17, 2021 | Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapd... |
| CVE-2020-11218 | HIGH | 7.5 | 0.8% | Mar 17, 2021 | Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Au... |
| CVE-2020-24263 | HIGH | 8.8 | 1.6% | Mar 16, 2021 | Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code... |
| CVE-2020-29553 | HIGH | 8.8 | 1.4% | Mar 15, 2021 | The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into v... |
| CVE-2020-29555 | HIGH | 8.1 | 2.9% | Mar 15, 2021 | The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary file... |
| CVE-2020-24985 | HIGH | 8.1 | 1.1% | Mar 15, 2021 | An issue was discovered in Quadbase EspressReports ES 7 Update 9. An authenticated user is able to navigate to the MenuP... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now