2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13763 | HIGH | 7.5 | 1.2% | Jun 2, 2020 | In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not block HTML inputs for Guest... |
| CVE-2020-13762 | MEDIUM | 6.1 | 1.0% | Jun 2, 2020 | In Joomla! before 3.9.19, incorrect input validation of the module tag option in com_modules allows XSS. |
| CVE-2020-13761 | MEDIUM | 6.1 | 1.0% | Jun 2, 2020 | In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles... |
| CVE-2020-13760 | HIGH | 8.8 | 0.7% | Jun 2, 2020 | In Joomla! before 3.9.19, missing token checks in com_postinstall lead to CSRF. |
| CVE-2020-7663 | HIGH | 7.5 | 4.3% | Jun 2, 2020 | websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension par... |
| CVE-2020-7662 | HIGH | 7.5 | 3.0% | Jun 2, 2020 | websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension pars... |
| CVE-2020-13759 | HIGH | 7.5 | 1.6% | Jun 2, 2020 | rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP network... |
| CVE-2020-12017 | CRITICAL | 9.8 | 2.3% | Jun 2, 2020 | GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. The device’s vulnerab... |
| CVE-2020-5410 | HIGH | 7.5 | 95.6% | Jun 2, 2020 | Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow ... |
| CVE-2020-3680 | HIGH | 7 | 0.2% | Jun 2, 2020 | A race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto, Snapdragon Compute, Snapdragon... |
| CVE-2020-3645 | HIGH | 7.5 | 0.7% | Jun 2, 2020 | Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes... |
| CVE-2020-3641 | CRITICAL | 9.8 | 1.1% | Jun 2, 2020 | Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdra... |
| CVE-2020-3633 | CRITICAL | 9.8 | 1.1% | Jun 2, 2020 | Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allo... |
| CVE-2020-3630 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Com... |
| CVE-2020-3625 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attribut... |
| CVE-2020-3623 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130 |
| CVE-2020-3618 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Sn... |
| CVE-2020-3616 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdrag... |
| CVE-2020-3615 | CRITICAL | 9.8 | 0.8% | Jun 2, 2020 | Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disas... |
| CVE-2020-3610 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as t... |
| CVE-2020-4503 | MEDIUM | 6.1 | 0.8% | Jun 2, 2020 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra... |
| CVE-2020-4431 | MEDIUM | 5.4 | 0.6% | Jun 2, 2020 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra... |
| CVE-2020-4367 | HIGH | 7.5 | 0.8% | Jun 2, 2020 | IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decr... |
| CVE-2020-4366 | MEDIUM | 6.1 | 0.7% | Jun 2, 2020 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra... |
| CVE-2020-4360 | MEDIUM | 5.4 | 0.7% | Jun 2, 2020 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now