2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4229 | HIGH | 7.3 | 0.9% | Jun 5, 2020 | IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, w... |
| CVE-2020-13816 | — | — | — | Jun 5, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-13817. Reason: This candidate is a reservation d... |
| CVE-2020-9859 | HIGH | 7.8 | 0.8% | Jun 5, 2020 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.... |
| CVE-2020-9074 | MEDIUM | 5.3 | 0.7% | Jun 5, 2020 | Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability.... |
| CVE-2020-1883 | MEDIUM | 4.9 | 0.8% | Jun 5, 2020 | Huawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker with high privileges exp... |
| CVE-2020-12723 | HIGH | 7.5 | 6.0% | Jun 5, 2020 | regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_c... |
| CVE-2020-11975 | CRITICAL | 9.8 | 29.9% | Jun 5, 2020 | Apache Unomi allows conditions to use OGNL scripting which offers the possibility to call static Java classes from the J... |
| CVE-2020-11492 | HIGH | 7.8 | 0.9% | Jun 5, 2020 | An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe p... |
| CVE-2020-10878 | HIGH | 8.6 | 4.9% | Jun 5, 2020 | Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A craft... |
| CVE-2020-10543 | HIGH | 8.2 | 11.3% | Jun 5, 2020 | Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers... |
| CVE-2020-12849 | MEDIUM | 5.4 | 0.8% | Jun 5, 2020 | Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including standard and shared user r... |
| CVE-2020-12848 | MEDIUM | 5.4 | 1.1% | Jun 5, 2020 | In Pydio Cells 2.0.4, once an authenticated user shares a file selecting the create a public link option, a hidden share... |
| CVE-2020-13843 | MEDIUM | 5.5 | 0.1% | Jun 5, 2020 | An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial ... |
| CVE-2020-13842 | HIGH | 7.8 | 0.1% | Jun 5, 2020 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). A dangerous AT com... |
| CVE-2020-13841 | CRITICAL | 9.8 | 0.7% | Jun 5, 2020 | An issue was discovered on LG mobile devices with Android OS 9 and 10 (MTK chipsets). An AT command handler allows attac... |
| CVE-2020-13840 | CRITICAL | 9.8 | 0.7% | Jun 5, 2020 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can... |
| CVE-2020-13839 | CRITICAL | 9.8 | 0.9% | Jun 5, 2020 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can... |
| CVE-2020-13849 | HIGH | 7.5 | 2.0% | Jun 4, 2020 | The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client... |
| CVE-2020-13768 | CRITICAL | 9.8 | 2.1% | Jun 4, 2020 | In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to a... |
| CVE-2020-13848 | HIGH | 7.5 | 3.5% | Jun 4, 2020 | Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a cr... |
| CVE-2020-12853 | MEDIUM | 6.1 | 0.8% | Jun 4, 2020 | Pydio Cells 2.0.4 allows XSS. A malicious user can either upload or create a new file that contains potentially maliciou... |
| CVE-2020-12852 | MEDIUM | 6.8 | 2.4% | Jun 4, 2020 | The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key ... |
| CVE-2020-12851 | HIGH | 8.1 | 1.5% | Jun 4, 2020 | Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells... |
| CVE-2020-12847 | HIGH | 7.2 | 1.7% | Jun 4, 2020 | Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is available to users with... |
| CVE-2020-11682 | MEDIUM | 6.5 | 0.6% | Jun 4, 2020 | Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by th... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now