2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11286 | MEDIUM | 6.8 | 0.2% | Feb 22, 2021 | An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard... |
| CVE-2020-11198 | MEDIUM | 6.7 | 0.1% | Feb 22, 2021 | Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improp... |
| CVE-2020-11147 | MEDIUM | 6.7 | 0.2% | Feb 22, 2021 | Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of... |
| CVE-2020-35664 | MEDIUM | 6.1 | 0.7% | Feb 22, 2021 | An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting (XSS) in ... |
| CVE-2020-35571 | MEDIUM | 6.1 | 0.7% | Feb 22, 2021 | An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.ph... |
| CVE-2020-24393 | MEDIUM | 5.9 | 0.9% | Feb 19, 2021 | TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allo... |
| CVE-2020-24392 | MEDIUM | 5.9 | 0.9% | Feb 19, 2021 | In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attac... |
| CVE-2020-12668 | MEDIUM | 6.5 | 1.8% | Feb 19, 2021 | Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context.... |
| CVE-2020-35499 | MEDIUM | 6.7 | 0.3% | Feb 19, 2021 | A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in ne... |
| CVE-2020-12374 | MEDIUM | 6.7 | 0.3% | Feb 19, 2021 | Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2... |
| CVE-2020-36248 | MEDIUM | 4.6 | 0.1% | Feb 19, 2021 | The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a bac... |
| CVE-2020-36252 | MEDIUM | 5.7 | 0.5% | Feb 19, 2021 | ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version o... |
| CVE-2020-36251 | MEDIUM | 4.3 | 0.6% | Feb 19, 2021 | ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remove... |
| CVE-2020-36250 | MEDIUM | 4.6 | 0.3% | Feb 19, 2021 | In the ownCloud application before 2.15 for Android, the lock protection mechanism can be bypassed by moving the system ... |
| CVE-2020-10254 | MEDIUM | 5.9 | 1.6% | Feb 19, 2021 | An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by ... |
| CVE-2020-35776 | MEDIUM | 6.5 | 3.9% | Feb 18, 2021 | A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remo... |
| CVE-2020-35592 | MEDIUM | 5.4 | 0.9% | Feb 18, 2021 | Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options header to the admin/ URI. A remote user is able to inject arbitra... |
| CVE-2020-35591 | MEDIUM | 5.4 | 1.1% | Feb 18, 2021 | Pi-hole 5.0, 5.1, and 5.1.1 allows Session Fixation. The application does not generate a new session cookie after the us... |
| CVE-2020-28463 | MEDIUM | 6.5 | 1.5% | Feb 18, 2021 | All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. In order to reduce ... |
| CVE-2020-4933 | MEDIUM | 5.4 | 0.5% | Feb 18, 2021 | IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allo... |
| CVE-2020-35577 | MEDIUM | 6.5 | 1.0% | Feb 18, 2021 | In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any authenticated user to ... |
| CVE-2020-25605 | MEDIUM | 5.9 | 6.0% | Feb 17, 2021 | Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain acces... |
| CVE-2020-12365 | MEDIUM | 5.5 | 0.2% | Feb 17, 2021 | Untrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15.45.32.5145, 15.36.39.5... |
| CVE-2020-8765 | MEDIUM | 6.7 | 0.2% | Feb 17, 2021 | Incorrect default permissions in the installer for the Intel(R) RealSense(TM) DCM may allow a privileged user to potenti... |
| CVE-2020-8701 | MEDIUM | 6.7 | 0.3% | Feb 17, 2021 | Incorrect default permissions in installer for the Intel(R) SSD Toolbox versions before 2/9/2021 may allow a privileged ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now