2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1950 | MEDIUM | 5.5 | 2.6% | Mar 23, 2020 | A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23... |
| CVE-2020-10661 | CRITICAL | 9.1 | 1.1% | Mar 23, 2020 | HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing neste... |
| CVE-2020-10660 | MEDIUM | 5.3 | 0.8% | Mar 23, 2020 | HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Gro... |
| CVE-2020-10593 | HIGH | 7.5 | 2.3% | Mar 23, 2020 | Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Servi... |
| CVE-2020-10592 | HIGH | 7.5 | 3.1% | Mar 23, 2020 | Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Servi... |
| CVE-2020-9752 | CRITICAL | 9.8 | 1.1% | Mar 23, 2020 | Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system... |
| CVE-2020-10821 | MEDIUM | 4.8 | 73.6% | Mar 22, 2020 | Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter. |
| CVE-2020-10820 | MEDIUM | 4.8 | 30.1% | Mar 22, 2020 | Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter. |
| CVE-2020-10819 | MEDIUM | 4.8 | 73.8% | Mar 22, 2020 | Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter. |
| CVE-2020-10818 | HIGH | 7.2 | 2.9% | Mar 22, 2020 | Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the ... |
| CVE-2020-10812 | MEDIUM | 5.5 | 1.5% | Mar 22, 2020 | An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5F_get_nrefs() locate... |
| CVE-2020-10811 | MEDIUM | 5.5 | 1.4% | Mar 22, 2020 | An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode(... |
| CVE-2020-10810 | MEDIUM | 5.5 | 1.4% | Mar 22, 2020 | An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() loc... |
| CVE-2020-10809 | MEDIUM | 5.5 | 1.5% | Mar 22, 2020 | An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located... |
| CVE-2020-10808 | HIGH | 8.8 | 77.3% | Mar 22, 2020 | Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint.... |
| CVE-2020-10807 | MEDIUM | 5.3 | 1.4% | Mar 22, 2020 | auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in... |
| CVE-2020-10806 | CRITICAL | 9.8 | 2.3% | Mar 22, 2020 | eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 20... |
| CVE-2020-10803 | MEDIUM | 5.4 | 1.6% | Mar 22, 2020 | In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code c... |
| CVE-2020-10802 | HIGH | 8 | 2.1% | Mar 22, 2020 | In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain par... |
| CVE-2020-10804 | HIGH | 8 | 2.7% | Mar 22, 2020 | In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current... |
| CVE-2020-10800 | HIGH | 8.1 | 1.4% | Mar 21, 2020 | lix through 15.8.7 allows man-in-the-middle attackers to execute arbitrary code by modifying the HTTP client-server data... |
| CVE-2020-10799 | CRITICAL | 9.8 | 1.4% | Mar 20, 2020 | The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call. |
| CVE-2020-8140 | MEDIUM | 6.7 | 0.7% | Mar 20, 2020 | A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client wit... |
| CVE-2020-8139 | MEDIUM | 6.5 | 1.5% | Mar 20, 2020 | A missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide-download shares to be do... |
| CVE-2020-8138 | MEDIUM | 6.5 | 1.4% | Mar 20, 2020 | A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now