2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6851 | HIGH | 7.5 | 5.0% | Jan 13, 2020 | OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack ... |
| CVE-2020-6848 | MEDIUM | 6.1 | 0.7% | Jan 13, 2020 | Axper Vision II 4 devices allow XSS via the DEVICE_NAME (aka Device Name) parameter to the configWebParams.cgi URI. |
| CVE-2020-6847 | MEDIUM | 5.4 | 0.9% | Jan 11, 2020 | OpenTrade through 0.2.0 has a DOM-based XSS vulnerability that is executed when an administrator attempts to delete a me... |
| CVE-2020-6840 | CRITICAL | 9.8 | 1.5% | Jan 11, 2020 | In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c. |
| CVE-2020-6839 | CRITICAL | 9.8 | 1.4% | Jan 11, 2020 | In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c. |
| CVE-2020-6838 | CRITICAL | 9.8 | 1.5% | Jan 11, 2020 | In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c. |
| CVE-2020-6836 | CRITICAL | 9.8 | 2.1% | Jan 11, 2020 | grammar-parser.jison in the hot-formula-parser package before 3.0.1 for Node.js is vulnerable to arbitrary code injectio... |
| CVE-2020-6377 | HIGH | 8.8 | 1.5% | Jan 10, 2020 | Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap co... |
| CVE-2020-6835 | CRITICAL | 9.8 | 2.0% | Jan 10, 2020 | An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking. |
| CVE-2020-6162 | CRITICAL | 9.1 | 1.7% | Jan 10, 2020 | An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitia... |
| CVE-2020-1767 | MEDIUM | 4.3 | 1.2% | Jan 10, 2020 | Agent A is able to save a draft (i.e. for customer reply). Then Agent B can open the draft, change the text completely a... |
| CVE-2020-1766 | MEDIUM | 6.1 | 1.3% | Jan 10, 2020 | Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents brow... |
| CVE-2020-1765 | MEDIUM | 5.3 | 1.5% | Jan 10, 2020 | An improper control of parameters allows the spoofing of the from fields of the following screens: AgentTicketCompose, A... |
| CVE-2020-6758 | MEDIUM | 6.1 | 0.8% | Jan 9, 2020 | A cross-site scripting (XSS) vulnerability in Option/optionsAll.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI... |
| CVE-2020-6757 | HIGH | 8.8 | 1.4% | Jan 9, 2020 | contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows authenticated attackers t... |
| CVE-2020-6756 | CRITICAL | 9.8 | 10.6% | Jan 9, 2020 | languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to re... |
| CVE-2020-5504 | HIGH | 8.8 | 38.8% | Jan 9, 2020 | In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could ... |
| CVE-2020-6750 | MEDIUM | 5.9 | 2.2% | Jan 9, 2020 | GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting v... |
| CVE-2020-6168 | HIGH | 7.6 | 2.0% | Jan 9, 2020 | A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with bas... |
| CVE-2020-6166 | MEDIUM | 5.4 | 1.1% | Jan 9, 2020 | A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with bas... |
| CVE-2020-6167 | HIGH | 8.8 | 0.9% | Jan 9, 2020 | A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable main... |
| CVE-2020-1925 | HIGH | 7.5 | 2.8% | Jan 9, 2020 | Apache Olingo versions 4.0.0 to 4.7.0 provide the AsyncRequestWrapperImpl class which reads a URL from the Location head... |
| CVE-2020-1810 | MEDIUM | 5.3 | 0.5% | Jan 9, 2020 | There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL ... |
| CVE-2020-1786 | MEDIUM | 4.6 | 0.2% | Jan 9, 2020 | HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerabilit... |
| CVE-2020-1826 | MEDIUM | 4.4 | 0.1% | Jan 9, 2020 | Huawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175(C00E59R2P11) have an information leak vulnerabil... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now