2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1893 | HIGH | 7.5 | 1.1% | Mar 3, 2020 | Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This... |
| CVE-2020-1892 | HIGH | 8.1 | 1.1% | Mar 3, 2020 | Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially l... |
| CVE-2020-1888 | HIGH | 7.5 | 1.1% | Mar 3, 2020 | Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DO... |
| CVE-2020-4198 | MEDIUM | 5.4 | 0.6% | Mar 3, 2020 | IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb... |
| CVE-2020-4197 | LOW | 2.4 | 0.3% | Mar 3, 2020 | IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the syst... |
| CVE-2020-4196 | MEDIUM | 5.4 | 0.6% | Mar 3, 2020 | IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb... |
| CVE-2020-9751 | CRITICAL | 9.1 | 0.5% | Mar 3, 2020 | Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and exec... |
| CVE-2020-10018 | CRITICAL | 9.8 | 5.0% | Mar 2, 2020 | WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory co... |
| CVE-2020-8778 | MEDIUM | 5.4 | 2.6% | Mar 2, 2020 | Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, ... |
| CVE-2020-8777 | MEDIUM | 5.4 | 3.2% | Mar 2, 2020 | Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, ... |
| CVE-2020-8776 | MEDIUM | 5.4 | 2.7% | Mar 2, 2020 | Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a ... |
| CVE-2020-8437 | HIGH | 7.5 | 12.0% | Mar 2, 2020 | The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which al... |
| CVE-2020-8013 | LOW | 2.5 | 0.3% | Mar 2, 2020 | A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterpr... |
| CVE-2020-1731 | CRITICAL | 9.8 | 1.3% | Mar 2, 2020 | A flaw was found in all versions of the Keycloak operator, before version 8.0.2,(community only) where the operator gene... |
| CVE-2020-8500 | HIGH | 7.2 | 3.5% | Mar 2, 2020 | In Artica Pandora FMS 7.42, Web Admin users can execute arbitrary code by uploading a .php file via the Updater or Exten... |
| CVE-2020-6764 | — | — | — | Mar 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-5249 | MEDIUM | 6.5 | 1.6% | Mar 2, 2020 | In Puma (RubyGem) before 4.3.3 and 3.12.4, if an application using Puma allows untrusted input in an early-hints header,... |
| CVE-2020-4292 | MEDIUM | 5.3 | 1.0% | Mar 2, 2020 | IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that include... |
| CVE-2020-4283 | HIGH | 8.6 | 1.3% | Mar 2, 2020 | IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 contains hard-coded credentials, such as a p... |
| CVE-2020-5539 | MEDIUM | 6.5 | 0.8% | Mar 2, 2020 | GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote at... |
| CVE-2020-9549 | HIGH | 7.8 | 1.3% | Mar 2, 2020 | In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document. |
| CVE-2020-6801 | HIGH | 8.8 | 1.4% | Mar 2, 2020 | Mozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed evidence of memory corru... |
| CVE-2020-6800 | HIGH | 8.8 | 2.3% | Mar 2, 2020 | Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of... |
| CVE-2020-6799 | HIGH | 8.8 | 1.5% | Mar 2, 2020 | Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported fil... |
| CVE-2020-6798 | MEDIUM | 6.1 | 2.1% | Mar 2, 2020 | If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now