2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36259 | — | — | — | Aug 22, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-36258 | — | — | — | Aug 22, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-36257 | — | — | — | Aug 22, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-27834 | — | — | — | Aug 22, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-27836 | CRITICAL | 9.8 | 1.0% | Aug 22, 2022 | A flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source r... |
| CVE-2020-36256 | — | — | — | Aug 19, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-27795 | HIGH | 7.5 | 1.2% | Aug 19, 2022 | A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or w... |
| CVE-2020-27794 | CRITICAL | 9.1 | 0.9% | Aug 19, 2022 | A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modificati... |
| CVE-2020-27793 | HIGH | 7.5 | 0.9% | Aug 19, 2022 | An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an atta... |
| CVE-2020-27792 | HIGH | 7.1 | 0.4% | Aug 19, 2022 | A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c fi... |
| CVE-2020-23466 | MEDIUM | 5.4 | 0.5% | Aug 19, 2022 | Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attacke... |
| CVE-2020-36599 | CRITICAL | 9.8 | 1.0% | Aug 18, 2022 | lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value. |
| CVE-2020-27791 | — | — | — | Aug 18, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-27789 | — | — | — | Aug 18, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-27788 | MEDIUM | 5.5 | 0.3% | Aug 18, 2022 | An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp f... |
| CVE-2020-27790 | MEDIUM | 5.5 | 0.3% | Aug 18, 2022 | A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp f... |
| CVE-2020-27787 | MEDIUM | 5.5 | 0.4% | Aug 18, 2022 | A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input... |
| CVE-2020-14394 | LOW | 3.2 | 0.4% | Aug 17, 2022 | An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer ... |
| CVE-2020-1756 | HIGH | 7.2 | 0.9% | Aug 16, 2022 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin... |
| CVE-2020-1755 | MEDIUM | 5.3 | 0.5% | Aug 16, 2022 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to... |
| CVE-2020-14379 | MEDIUM | 5.6 | 0.2% | Aug 16, 2022 | A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading ... |
| CVE-2020-14322 | HIGH | 7.5 | 0.8% | Aug 16, 2022 | In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitig... |
| CVE-2020-14321 | HIGH | 8.8 | 16.4% | Aug 16, 2022 | In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role wi... |
| CVE-2020-14320 | MEDIUM | 6.1 | 0.6% | Aug 16, 2022 | In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflect... |
| CVE-2020-10728 | HIGH | 7.8 | 0.2% | Aug 16, 2022 | A flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1. This container grants all us... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now