2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-10899 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.295... |
| CVE-2020-10898 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10897 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10896 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10895 | HIGH | 7.8 | 4.8% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10894 | LOW | 3.3 | 3.3% | Apr 22, 2020 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomP... |
| CVE-2020-10893 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1... |
| CVE-2020-10892 | HIGH | 8.8 | 2.2% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10891 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10890 | HIGH | 8.8 | 2.2% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-10889 | HIGH | 7.8 | 4.7% | Apr 22, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0... |
| CVE-2020-1983 | MEDIUM | 6.5 | 2.3% | Apr 22, 2020 | A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets t... |
| CVE-2020-11649 | MEDIUM | 6.5 | 0.8% | Apr 22, 2020 | An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the gr... |
| CVE-2020-11506 | HIGH | 7.5 | 1.2% | Apr 22, 2020 | An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact uploads... |
| CVE-2020-11505 | HIGH | 7.5 | 1.2% | Apr 22, 2020 | An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9... |
| CVE-2020-7490 | HIGH | 7.8 | 0.4% | Apr 22, 2020 | A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Desig... |
| CVE-2020-7489 | CRITICAL | 9.8 | 1.5% | Apr 22, 2020 | A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerabili... |
| CVE-2020-7488 | HIGH | 7.5 | 0.8% | Apr 22, 2020 | A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information t... |
| CVE-2020-7487 | CRITICAL | 9.8 | 0.7% | Apr 22, 2020 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute... |
| CVE-2020-7055 | CRITICAL | 9.9 | 3.1% | Apr 22, 2020 | An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function... |
| CVE-2020-12066 | HIGH | 7.5 | 3.0% | Apr 22, 2020 | CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the se... |
| CVE-2020-11011 | HIGH | 8.8 | 1.9% | Apr 22, 2020 | In Phproject before version 1.7.8, there's a vulnerability which allows users with access to file uploads to execute arb... |
| CVE-2020-7642 | MEDIUM | 5.4 | 0.9% | Apr 22, 2020 | lazysizes through 5.2.0 allows execution of malicious JavaScript. The following attributes are not sanitized by the vide... |
| CVE-2020-5740 | HIGH | 7.8 | 0.7% | Apr 22, 2020 | Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary ... |
| CVE-2020-10712 | HIGH | 8.2 | 1.0% | Apr 22, 2020 | A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now