2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11725 | HIGH | 7.8 | 0.5% | Apr 12, 2020 | snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later aff... |
| CVE-2020-11724 | HIGH | 7.5 | 2.6% | Apr 12, 2020 | An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP request smuggling, as demons... |
| CVE-2020-11722 | CRITICAL | 9.8 | 3.9% | Apr 12, 2020 | Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytec... |
| CVE-2020-11721 | MEDIUM | 6.5 | 0.9% | Apr 12, 2020 | load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, wh... |
| CVE-2020-11714 | MEDIUM | 5.4 | 0.7% | Apr 12, 2020 | eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location. |
| CVE-2020-11713 | HIGH | 7.5 | 2.0% | Apr 12, 2020 | wolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side-channel attacks. |
| CVE-2020-11712 | MEDIUM | 6.1 | 1.1% | Apr 12, 2020 | Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field. |
| CVE-2020-11710 | CRITICAL | 9.8 | 33.8% | Apr 12, 2020 | An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be accessible on interfaces othe... |
| CVE-2020-11709 | HIGH | 7.5 | 1.6% | Apr 12, 2020 | cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, whic... |
| CVE-2020-11708 | CRITICAL | 9.8 | 1.6% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. Privilege escalation can occur via the /ajax/SetU... |
| CVE-2020-11707 | HIGH | 8.8 | 1.0% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. It doesn't enforce permission over Windows Symlin... |
| CVE-2020-11706 | HIGH | 8.8 | 0.5% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such ... |
| CVE-2020-11705 | CRITICAL | 9.8 | 0.9% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to loa... |
| CVE-2020-11704 | MEDIUM | 6.1 | 0.7% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and R... |
| CVE-2020-11703 | HIGH | 7.5 | 0.9% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response... |
| CVE-2020-11702 | MEDIUM | 6.1 | 0.7% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has Multiple Stored and Re... |
| CVE-2020-11701 | HIGH | 8.8 | 0.5% | Apr 12, 2020 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonst... |
| CVE-2020-11694 | HIGH | 7.5 | 1.8% | Apr 10, 2020 | In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed... |
| CVE-2020-11647 | HIGH | 7.5 | 3.3% | Apr 10, 2020 | In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed i... |
| CVE-2020-9056 | MEDIUM | 5.4 | 0.6% | Apr 10, 2020 | Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated a... |
| CVE-2020-6765 | HIGH | 7.2 | 1.2% | Apr 10, 2020 | D-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a suppo... |
| CVE-2020-5406 | MEDIUM | 6.5 | 1.0% | Apr 10, 2020 | VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x vers... |
| CVE-2020-5330 | HIGH | 7.5 | 12.9% | Apr 10, 2020 | Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22 ... |
| CVE-2020-5303 | LOW | 3.7 | 1.3% | Apr 10, 2020 | Tendermint before versions 0.33.3, 0.32.10, and 0.31.12 has a denial-of-service vulnerability. Tendermint does not limit... |
| CVE-2020-11002 | HIGH | 8.8 | 5.2% | Apr 10, 2020 | dropwizard-validation before versions 2.0.3 and 1.3.21 has a remote code execution vulnerability. A server-side template... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now