2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3626 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto, Sna... |
| CVE-2020-3614 | CRITICAL | 9.8 | 0.7% | Jun 22, 2020 | Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdr... |
| CVE-2020-3613 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon ... |
| CVE-2020-14962 | MEDIUM | 5.4 | 0.9% | Jun 22, 2020 | Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inj... |
| CVE-2020-14961 | MEDIUM | 5.3 | 0.9% | Jun 22, 2020 | Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value. |
| CVE-2020-14960 | HIGH | 7.2 | 1.7% | Jun 22, 2020 | A SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments.php via the ctype param... |
| CVE-2020-14959 | MEDIUM | 5.4 | 0.9% | Jun 22, 2020 | Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject a... |
| CVE-2020-14467 | — | — | — | Jun 22, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-14958 | MEDIUM | 6.5 | 0.9% | Jun 21, 2020 | In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check. |
| CVE-2020-14954 | MEDIUM | 5.9 | 2.3% | Jun 21, 2020 | Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When... |
| CVE-2020-14950 | HIGH | 8.8 | 2.6% | Jun 21, 2020 | aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modi... |
| CVE-2020-14942 | CRITICAL | 9.8 | 1.3% | Jun 21, 2020 | Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py. |
| CVE-2020-14933 | HIGH | 8.8 | 1.4% | Jun 20, 2020 | compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST requ... |
| CVE-2020-14932 | CRITICAL | 9.8 | 1.4% | Jun 20, 2020 | compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET reques... |
| CVE-2020-13264 | MEDIUM | 5.3 | 1.1% | Jun 19, 2020 | Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view... |
| CVE-2020-13263 | HIGH | 8.8 | 1.0% | Jun 19, 2020 | An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13... |
| CVE-2020-13261 | LOW | 2.7 | 0.9% | Jun 19, 2020 | Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amaz... |
| CVE-2020-14931 | CRITICAL | 9.8 | 2.6% | Jun 19, 2020 | A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to ... |
| CVE-2020-13276 | MEDIUM | 4.3 | 0.7% | Jun 19, 2020 | User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/E... |
| CVE-2020-13275 | HIGH | 8.1 | 1.0% | Jun 19, 2020 | A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later ... |
| CVE-2020-13274 | HIGH | 7.5 | 1.1% | Jun 19, 2020 | A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts ... |
| CVE-2020-13273 | HIGH | 7.5 | 1.2% | Jun 19, 2020 | A Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0 and later through 13.0.1 |
| CVE-2020-13272 | HIGH | 8.8 | 0.6% | Jun 19, 2020 | OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authoriza... |
| CVE-2020-13265 | MEDIUM | 5.3 | 0.7% | Jun 19, 2020 | User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass email verification |
| CVE-2020-13262 | MEDIUM | 6.1 | 0.9% | Jun 19, 2020 | Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially craft... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now