2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13110 | HIGH | 7.8 | 0.7% | May 16, 2020 | The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of ... |
| CVE-2020-13109 | CRITICAL | 9.8 | 4.8% | May 16, 2020 | Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted... |
| CVE-2020-8149 | CRITICAL | 9.8 | 2.0% | May 15, 2020 | Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before ve... |
| CVE-2020-1758 | MEDIUM | 5.9 | 0.9% | May 15, 2020 | A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while se... |
| CVE-2020-13093 | MEDIUM | 5.3 | 1.3% | May 15, 2020 | iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal. |
| CVE-2020-13092 | CRITICAL | 9.8 | 2.6% | May 15, 2020 | scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to ... |
| CVE-2020-13091 | CRITICAL | 9.8 | 3.4% | May 15, 2020 | pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() fun... |
| CVE-2020-12872 | MEDIUM | 5.5 | 0.4% | May 15, 2020 | yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet3... |
| CVE-2020-12889 | CRITICAL | 9.8 | 1.2% | May 15, 2020 | MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case. |
| CVE-2020-12888 | MEDIUM | 5.3 | 0.4% | May 15, 2020 | The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space. |
| CVE-2020-12798 | HIGH | 7.8 | 0.3% | May 15, 2020 | Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command... |
| CVE-2020-12651 | CRITICAL | 9.8 | 6.6% | May 15, 2020 | SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow b... |
| CVE-2020-12834 | CRITICAL | 9.8 | 11.1% | May 15, 2020 | eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSO... |
| CVE-2020-12685 | MEDIUM | 6.1 | 0.8% | May 15, 2020 | XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote... |
| CVE-2020-11526 | LOW | 2.2 | 2.0% | May 15, 2020 | libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read. |
| CVE-2020-11525 | LOW | 2.2 | 1.7% | May 15, 2020 | libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read. |
| CVE-2020-11524 | MEDIUM | 6.6 | 1.8% | May 15, 2020 | libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write. |
| CVE-2020-11523 | MEDIUM | 6.6 | 2.0% | May 15, 2020 | libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow. |
| CVE-2020-11522 | MEDIUM | 6.5 | 2.7% | May 15, 2020 | libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read. |
| CVE-2020-11521 | MEDIUM | 6.6 | 1.9% | May 15, 2020 | libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write. |
| CVE-2020-7809 | MEDIUM | 6.1 | 0.6% | May 15, 2020 | ALSong 3.46 and earlier version contain a Document Object Model (DOM) based cross-site scripting vulnerability caused by... |
| CVE-2020-9073 | LOW | 2.4 | 0.2% | May 15, 2020 | Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability.... |
| CVE-2020-3810 | MEDIUM | 5.5 | 1.3% | May 15, 2020 | Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service whe... |
| CVE-2020-1808 | HIGH | 7.1 | 0.5% | May 15, 2020 | Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions ea... |
| CVE-2020-10744 | MEDIUM | 5 | 0.3% | May 15, 2020 | An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running bec... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now