2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13976 | HIGH | 8.8 | 1.8% | Jun 9, 2020 | An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary comman... |
| CVE-2020-10761 | MEDIUM | 5 | 1.8% | Jun 9, 2020 | An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. Thi... |
| CVE-2020-10757 | HIGH | 7.8 | 1.0% | Jun 9, 2020 | A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allow... |
| CVE-2020-5589 | HIGH | 8.8 | 0.6% | Jun 9, 2020 | SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X... |
| CVE-2020-13974 | HIGH | 7.8 | 0.6% | Jun 9, 2020 | An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_as... |
| CVE-2020-13973 | MEDIUM | 6.1 | 1.1% | Jun 9, 2020 | OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls anoth... |
| CVE-2020-13965 | MEDIUM | 6.1 | 76.6% | Jun 9, 2020 | An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML atta... |
| CVE-2020-13964 | MEDIUM | 6.1 | 1.0% | Jun 9, 2020 | An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include/rcmail_output_html.php allows... |
| CVE-2020-13962 | HIGH | 7.5 | 3.0% | Jun 9, 2020 | Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error qu... |
| CVE-2020-13844 | MEDIUM | 5.5 | 0.5% | Jun 8, 2020 | Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow un... |
| CVE-2020-4041 | MEDIUM | 6.1 | 2.0% | Jun 8, 2020 | In Bolt CMS before version 3.7.1, the filename of uploaded files was vulnerable to stored XSS. It is not possible to inj... |
| CVE-2020-4040 | MEDIUM | 4.3 | 1.8% | Jun 8, 2020 | Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be gen... |
| CVE-2020-4038 | HIGH | 7.4 | 7.2% | Jun 8, 2020 | GraphQL Playground (graphql-playground-html NPM package) before version 1.6.22 have a severe XSS Reflection attack vulne... |
| CVE-2020-13960 | HIGH | 7.5 | 1.2% | Jun 8, 2020 | D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search p... |
| CVE-2020-13885 | HIGH | 7.8 | 0.6% | Jun 8, 2020 | Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during ... |
| CVE-2020-13884 | HIGH | 7.8 | 0.6% | Jun 8, 2020 | Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows loc... |
| CVE-2020-13428 | HIGH | 7.8 | 2.4% | Jun 8, 2020 | A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media p... |
| CVE-2020-13432 | HIGH | 7.5 | 32.8% | Jun 8, 2020 | rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to ... |
| CVE-2020-10754 | MEDIUM | 4.3 | 1.0% | Jun 8, 2020 | It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-p... |
| CVE-2020-8954 | MEDIUM | 5.4 | 0.8% | Jun 8, 2020 | OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.[a link that opens another app in the browser can be manip... |
| CVE-2020-5304 | HIGH | 7.5 | 1.0% | Jun 8, 2020 | The dashboard in WhiteSource Application Vulnerability Management (AVM) before version 20.4.1 allows Log Injection via a... |
| CVE-2020-13696 | MEDIUM | 4.4 | 0.4% | Jun 8, 2020 | An issue was discovered in LinuxTV xawtv before 3.107. The function dev_open() in v4l-conf.c does not perform sufficient... |
| CVE-2020-13625 | HIGH | 7.5 | 3.8% | Jun 8, 2020 | PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote charac... |
| CVE-2020-12800 | CRITICAL | 9.8 | 78.8% | Jun 8, 2020 | The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Uploa... |
| CVE-2020-12695 | HIGH | 7.5 | 15.2% | Jun 8, 2020 | The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription r... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now