2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36224 | HIGH | 7.5 | 4.3% | Jan 26, 2021 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo pr... |
| CVE-2020-36223 | HIGH | 7.5 | 4.2% | Jan 26, 2021 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, r... |
| CVE-2020-36222 | HIGH | 7.5 | 77.2% | Jan 26, 2021 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, ... |
| CVE-2020-36221 | HIGH | 7.5 | 85.0% | Jan 26, 2021 | An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertio... |
| CVE-2020-36215 | HIGH | 7.5 | 1.4% | Jan 26, 2021 | An issue was discovered in the hashconsing crate before 1.1.0 for Rust. Because HConsed does not have bounds on its Send... |
| CVE-2020-36213 | HIGH | 7.5 | 1.4% | Jan 26, 2021 | An issue was discovered in the abi_stable crate before 0.9.1 for Rust. A retain call can create an invalid UTF-8 string,... |
| CVE-2020-36212 | HIGH | 7.5 | 1.4% | Jan 26, 2021 | An issue was discovered in the abi_stable crate before 0.9.1 for Rust. DrainFilter lacks soundness because of a double d... |
| CVE-2020-36211 | HIGH | 7 | 0.3% | Jan 26, 2021 | An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send ... |
| CVE-2020-36210 | HIGH | 7.8 | 0.4% | Jan 26, 2021 | An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized mem... |
| CVE-2020-36209 | HIGH | 7 | 0.4% | Jan 26, 2021 | An issue was discovered in the late-static crate before 0.4.0 for Rust. Because Sync is implemented for LateStatic with ... |
| CVE-2020-36208 | HIGH | 7.8 | 0.4% | Jan 26, 2021 | An issue was discovered in the conquer-once crate before 0.3.2 for Rust. Thread crossing can occur for a non-Send but Sy... |
| CVE-2020-36207 | HIGH | 7 | 0.3% | Jan 26, 2021 | An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Sen... |
| CVE-2020-36206 | HIGH | 7 | 0.3% | Jan 26, 2021 | An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race ... |
| CVE-2020-36201 | HIGH | 7.5 | 0.8% | Jan 26, 2021 | An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655,... |
| CVE-2020-35845 | HIGH | 7.8 | 0.9% | Jan 26, 2021 | FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x96cf. |
| CVE-2020-35844 | HIGH | 7.8 | 0.9% | Jan 26, 2021 | FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0xbe9c4. |
| CVE-2020-35576 | HIGH | 8.8 | 42.3% | Jan 26, 2021 | A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216... |
| CVE-2020-35239 | HIGH | 8.8 | 0.6% | Jan 26, 2021 | A vulnerability exists in CakePHP versions 4.0.x through 4.1.3. The CsrfProtectionMiddleware component allows method ove... |
| CVE-2020-29001 | HIGH | 7.2 | 1.3% | Jan 26, 2021 | An issue was discovered on Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury MI-CW024 Doorbell 2.9.6... |
| CVE-2020-29000 | HIGH | 7.2 | 2.5% | Jan 26, 2021 | An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allow... |
| CVE-2020-28999 | HIGH | 7.2 | 1.7% | Jan 26, 2021 | An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote at... |
| CVE-2020-28874 | HIGH | 7.5 | 2.4% | Jan 26, 2021 | reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business... |
| CVE-2020-27814 | HIGH | 7.8 | 2.0% | Jan 26, 2021 | A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw ... |
| CVE-2020-27541 | HIGH | 7.5 | 1.1% | Jan 26, 2021 | Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast disc... |
| CVE-2020-27288 | HIGH | 7.8 | 1.3% | Jan 26, 2021 | An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allow... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now