2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28455 | MEDIUM | 6.1 | 0.5% | Jul 25, 2022 | This affects all versions of package markdown-it-toc. The title of the generated toc and the contents of the header are ... |
| CVE-2020-28447 | CRITICAL | 9.8 | 1.1% | Jul 25, 2022 | This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported functi... |
| CVE-2020-28446 | CRITICAL | 9.8 | 3.3% | Jul 25, 2022 | The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js. |
| CVE-2020-28445 | CRITICAL | 9.8 | 1.2% | Jul 25, 2022 | This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.late... |
| CVE-2020-28443 | CRITICAL | 9.8 | 1.1% | Jul 25, 2022 | This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js. |
| CVE-2020-28441 | CRITICAL | 9.8 | 1.0% | Jul 25, 2022 | This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that p... |
| CVE-2020-28438 | CRITICAL | 9.8 | 1.1% | Jul 25, 2022 | This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js |
| CVE-2020-28436 | CRITICAL | 9.8 | 0.8% | Jul 25, 2022 | This affects all versions of package google-cloudstorage-commands. |
| CVE-2020-28435 | CRITICAL | 9.8 | 1.1% | Jul 25, 2022 | This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js. |
| CVE-2020-28422 | HIGH | 7.8 | 0.5% | Jul 25, 2022 | All versions of package git-archive are vulnerable to Command Injection via the exports function. |
| CVE-2020-14126 | HIGH | 7.5 | 0.6% | Jul 22, 2022 | Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sens... |
| CVE-2020-14114 | HIGH | 7.5 | 0.6% | Jul 22, 2022 | information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of s... |
| CVE-2020-36558 | MEDIUM | 5.1 | 0.3% | Jul 21, 2022 | A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and gene... |
| CVE-2020-36557 | MEDIUM | 5.1 | 0.2% | Jul 21, 2022 | A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lea... |
| CVE-2020-21406 | HIGH | 7.5 | 0.8% | Jul 20, 2022 | An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service vi... |
| CVE-2020-21405 | HIGH | 7.5 | 0.8% | Jul 20, 2022 | An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColo... |
| CVE-2020-23563 | MEDIUM | 5.5 | 0.3% | Jul 18, 2022 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba. |
| CVE-2020-23562 | MEDIUM | 5.5 | 0.2% | Jul 18, 2022 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000aefe. |
| CVE-2020-23561 | MEDIUM | 5.5 | 0.3% | Jul 18, 2022 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000005722. |
| CVE-2020-16093 | HIGH | 7.5 | 0.6% | Jul 18, 2022 | In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when conn... |
| CVE-2020-7641 | HIGH | 7.8 | 0.4% | Jul 17, 2022 | This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying pr... |
| CVE-2020-35305 | MEDIUM | 6.1 | 0.6% | Jul 15, 2022 | Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog. |
| CVE-2020-36553 | MEDIUM | 5.4 | 0.8% | Jul 15, 2022 | Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Area(fo... |
| CVE-2020-36552 | MEDIUM | 5.4 | 0.8% | Jul 15, 2022 | Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Made fi... |
| CVE-2020-36551 | MEDIUM | 5.4 | 0.8% | Jul 15, 2022 | Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Item Na... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now