2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6391 | MEDIUM | 4.3 | 1.3% | Feb 11, 2020 | Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to b... |
| CVE-2020-6390 | HIGH | 8.8 | 3.1% | Feb 11, 2020 | Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially e... |
| CVE-2020-6389 | HIGH | 8.8 | 1.7% | Feb 11, 2020 | Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit he... |
| CVE-2020-6388 | HIGH | 8.8 | 2.0% | Feb 11, 2020 | Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit... |
| CVE-2020-6387 | HIGH | 8.8 | 1.8% | Feb 11, 2020 | Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit he... |
| CVE-2020-6385 | HIGH | 8.8 | 2.3% | Feb 11, 2020 | Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass si... |
| CVE-2020-6382 | HIGH | 8.8 | 2.3% | Feb 11, 2020 | Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit hea... |
| CVE-2020-6381 | HIGH | 8.8 | 2.2% | Feb 11, 2020 | Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker ... |
| CVE-2020-6380 | HIGH | 8.8 | 1.2% | Feb 11, 2020 | Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had ... |
| CVE-2020-6379 | HIGH | 8.8 | 1.1% | Feb 11, 2020 | Use after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2020-6378 | HIGH | 8.8 | 1.2% | Feb 11, 2020 | Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap c... |
| CVE-2020-8596 | HIGH | 7.5 | 1.6% | Feb 11, 2020 | participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-bas... |
| CVE-2020-7217 | HIGH | 7.5 | 1.6% | Feb 11, 2020 | An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause... |
| CVE-2020-5529 | HIGH | 8.1 | 4.6% | Feb 11, 2020 | HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a ... |
| CVE-2020-3935 | HIGH | 7.5 | 0.9% | Feb 11, 2020 | TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, stores users’ information by c... |
| CVE-2020-3934 | CRITICAL | 9.8 | 1.4% | Feb 11, 2020 | TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pr... |
| CVE-2020-3933 | MEDIUM | 5.3 | 1.2% | Feb 11, 2020 | TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, allows attackers to enumerate ... |
| CVE-2020-8841 | HIGH | 8.8 | 1.4% | Feb 10, 2020 | An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint i... |
| CVE-2020-8840 | CRITICAL | 9.8 | 26.6% | Feb 10, 2020 | FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apac... |
| CVE-2020-8089 | MEDIUM | 5.4 | 0.6% | Feb 10, 2020 | Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the group_list page. |
| CVE-2020-1697 | MEDIUM | 5.4 | 0.8% | Feb 10, 2020 | It was found in all keycloak versions before 9.0.0 that links to external applications (Application Links) in the admin ... |
| CVE-2020-8825 | MEDIUM | 5.4 | 1.9% | Feb 10, 2020 | index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS. |
| CVE-2020-7060 | CRITICAL | 9.1 | 8.9% | Feb 10, 2020 | When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.... |
| CVE-2020-7059 | CRITICAL | 9.1 | 7.4% | Feb 10, 2020 | When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 an... |
| CVE-2020-8823 | MEDIUM | 6.1 | 1.8% | Feb 10, 2020 | htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka cal... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now