2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35962 | HIGH | 7.5 | 1.3% | Jan 3, 2021 | The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring (LRC), an Ethereum ... |
| CVE-2020-28852 | HIGH | 7.5 | 1.7% | Jan 2, 2021 | In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processi... |
| CVE-2020-28851 | HIGH | 7.5 | 2.3% | Jan 2, 2021 | In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- exten... |
| CVE-2020-35950 | HIGH | 8.8 | 0.9% | Jan 1, 2021 | An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almos... |
| CVE-2020-35948 | HIGH | 8.8 | 24.9% | Jan 1, 2021 | An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated atta... |
| CVE-2020-35947 | HIGH | 7.4 | 1.1% | Jan 1, 2021 | An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the AJAX action endpoints lack... |
| CVE-2020-35945 | HIGH | 8.8 | 2.4% | Jan 1, 2021 | An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authent... |
| CVE-2020-35944 | HIGH | 8.8 | 0.8% | Jan 1, 2021 | An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vuln... |
| CVE-2020-35939 | HIGH | 8.8 | 2.1% | Jan 1, 2021 | PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated... |
| CVE-2020-35938 | HIGH | 8.8 | 2.1% | Jan 1, 2021 | PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated atta... |
| CVE-2020-35937 | HIGH | 8 | 1.7% | Jan 1, 2021 | Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote ... |
| CVE-2020-35936 | HIGH | 8 | 1.7% | Jan 1, 2021 | Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authe... |
| CVE-2020-35935 | HIGH | 8.8 | 1.5% | Jan 1, 2021 | The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aam... |
| CVE-2020-35932 | HIGH | 8.8 | 2.1% | Jan 1, 2021 | Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with ... |
| CVE-2020-35931 | HIGH | 7.8 | 2.3% | Dec 31, 2020 | An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x b... |
| CVE-2020-26165 | HIGH | 8.8 | 2.5% | Dec 31, 2020 | qdPM through 9.1 allows PHP Object Injection via timeReportActions::executeExport in core/apps/qdPM/modules/timeReport/a... |
| CVE-2020-35896 | HIGH | 7.5 | 1.3% | Dec 31, 2020 | An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leadin... |
| CVE-2020-35894 | HIGH | 7.5 | 1.2% | Dec 31, 2020 | An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur. |
| CVE-2020-35893 | HIGH | 7.5 | 1.3% | Dec 31, 2020 | An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove() has an off-by-one error, causing memory... |
| CVE-2020-35891 | HIGH | 7.5 | 1.4% | Dec 31, 2020 | An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via a remo... |
| CVE-2020-35890 | HIGH | 7.5 | 1.4% | Dec 31, 2020 | An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via out-of... |
| CVE-2020-35889 | HIGH | 8.1 | 0.9% | Dec 31, 2020 | An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety vi... |
| CVE-2020-35882 | HIGH | 8.1 | 1.0% | Dec 31, 2020 | An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable ref... |
| CVE-2020-35875 | HIGH | 7.5 | 1.3% | Dec 31, 2020 | An issue was discovered in the tokio-rustls crate before 0.13.1 for Rust. Excessive memory usage may occur when data arr... |
| CVE-2020-35874 | HIGH | 8.1 | 1.0% | Dec 31, 2020 | An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and re... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now