2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8586 | — | — | — | Sep 6, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-29260 | HIGH | 7.5 | 0.9% | Sep 2, 2022 | libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup(). |
| CVE-2020-22669 | CRITICAL | 9.8 | 1.0% | Sep 2, 2022 | Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can ... |
| CVE-2020-4301 | MEDIUM | 6.5 | 0.3% | Sep 1, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacke... |
| CVE-2020-35535 | MEDIUM | 5.5 | 0.3% | Sep 1, 2022 | In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadat... |
| CVE-2020-35534 | MEDIUM | 5.5 | 0.2% | Sep 1, 2022 | In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\cr... |
| CVE-2020-35533 | MEDIUM | 5.5 | 0.3% | Sep 1, 2022 | In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decod... |
| CVE-2020-35532 | MEDIUM | 5.5 | 0.4% | Sep 1, 2022 | In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_util... |
| CVE-2020-35531 | MEDIUM | 5.5 | 0.3% | Sep 1, 2022 | In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_p... |
| CVE-2020-35530 | MEDIUM | 5.5 | 0.4% | Sep 1, 2022 | In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patc... |
| CVE-2020-35529 | — | — | — | Sep 1, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-35528 | — | — | — | Sep 1, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-35527 | CRITICAL | 9.8 | 1.2% | Sep 1, 2022 | In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. |
| CVE-2020-35526 | — | — | — | Sep 1, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-35525 | HIGH | 7.5 | 1.1% | Sep 1, 2022 | In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. |
| CVE-2020-27784 | MEDIUM | 5.5 | 0.2% | Sep 1, 2022 | A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer_ioctl() printer_ioctl()... |
| CVE-2020-35538 | MEDIUM | 5.5 | 0.3% | Aug 31, 2022 | A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. |
| CVE-2020-35537 | — | — | — | Aug 31, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-35536 | — | — | — | Aug 31, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-26938 | HIGH | 7.2 | 0.7% | Aug 29, 2022 | In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the aut... |
| CVE-2020-27802 | MEDIUM | 5.5 | 0.3% | Aug 25, 2022 | An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O ... |
| CVE-2020-27801 | HIGH | 7.8 | 0.4% | Aug 25, 2022 | A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. |
| CVE-2020-27800 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. |
| CVE-2020-27799 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mac... |
| CVE-2020-27798 | MEDIUM | 5.5 | 0.3% | Aug 25, 2022 | An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mac... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now