2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1764 | HIGH | 8.6 | 3.5% | Mar 26, 2020 | A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to... |
| CVE-2020-10969 | HIGH | 8.8 | 3.6% | Mar 26, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-10968 | HIGH | 8.8 | 3.6% | Mar 26, 2020 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-8923 | MEDIUM | 6.1 | 0.3% | Mar 26, 2020 | An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an atta... |
| CVE-2020-8910 | MEDIUM | 6.5 | 0.5% | Mar 26, 2020 | A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker ... |
| CVE-2020-10245 | CRITICAL | 9.8 | 2.5% | Mar 26, 2020 | CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow. |
| CVE-2020-10966 | MEDIUM | 6.5 | 1.9% | Mar 25, 2020 | In the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel before 1.1.1, Host header ... |
| CVE-2020-10965 | HIGH | 8.1 | 1.4% | Mar 25, 2020 | Teradici PCoIP Management Console 20.01.0 and 19.11.1 is vulnerable to unauthenticated password resets via login/resetad... |
| CVE-2020-6815 | CRITICAL | 9.8 | 1.3% | Mar 25, 2020 | Mozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of these bugs showed eviden... |
| CVE-2020-6814 | CRITICAL | 9.8 | 1.8% | Mar 25, 2020 | Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed eviden... |
| CVE-2020-6813 | MEDIUM | 5.3 | 1.2% | Mar 25, 2020 | When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in the CSS block cou... |
| CVE-2020-6812 | MEDIUM | 5.3 | 1.6% | Mar 25, 2020 | The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's A... |
| CVE-2020-6811 | HIGH | 8.8 | 3.2% | Mar 25, 2020 | The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be c... |
| CVE-2020-6810 | MEDIUM | 4.3 | 1.0% | Mar 25, 2020 | After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification th... |
| CVE-2020-6809 | HIGH | 7.5 | 1.4% | Mar 25, 2020 | When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possi... |
| CVE-2020-6808 | MEDIUM | 6.5 | 1.0% | Mar 25, 2020 | When a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to create an HTML doc... |
| CVE-2020-6807 | HIGH | 8.8 | 1.2% | Mar 25, 2020 | When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been ex... |
| CVE-2020-6806 | HIGH | 8.8 | 2.5% | Mar 25, 2020 | By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resize... |
| CVE-2020-6805 | HIGH | 8.8 | 1.3% | Mar 25, 2020 | When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, res... |
| CVE-2020-10964 | CRITICAL | 9.8 | 2.8% | Mar 25, 2020 | Serendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the filename of a renamed ... |
| CVE-2020-10963 | HIGH | 7.2 | 14.7% | Mar 25, 2020 | FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution)... |
| CVE-2020-9520 | MEDIUM | 5.4 | 0.8% | Mar 25, 2020 | A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerabil... |
| CVE-2020-3791 | MEDIUM | 4.3 | 2.2% | Mar 25, 2020 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds ... |
| CVE-2020-3790 | HIGH | 8.8 | 3.6% | Mar 25, 2020 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corrupti... |
| CVE-2020-3789 | CRITICAL | 9.8 | 3.9% | Mar 25, 2020 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corrupti... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now