2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1787 | MEDIUM | 6.6 | 0.3% | Jan 9, 2020 | HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. T... |
| CVE-2020-5308 | MEDIUM | 6.1 | 1.3% | Jan 9, 2020 | PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode ... |
| CVE-2020-6632 | MEDIUM | 6.1 | 0.7% | Jan 9, 2020 | In PrestaShop 1.7.6.2, XSS can occur during addition or removal of a QuickAccess link. This is related to AdminQuickAcce... |
| CVE-2020-6631 | MEDIUM | 5.5 | 0.8% | Jan 9, 2020 | An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_m2ts_stream_proces... |
| CVE-2020-6630 | MEDIUM | 5.5 | 0.8% | Jan 9, 2020 | An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_isom_get_media_dat... |
| CVE-2020-6629 | MEDIUM | 6.5 | 1.3% | Jan 9, 2020 | Ming (aka libming) 0.4.8 has z NULL pointer dereference in the function decompileGETURL2() in decompile.c. |
| CVE-2020-6628 | HIGH | 8.8 | 1.5% | Jan 9, 2020 | Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c. |
| CVE-2020-5205 | MEDIUM | 5.4 | 0.8% | Jan 9, 2020 | In Pow (Hex package) before 1.0.16, the use of Plug.Session in Pow.Plug.Session is susceptible to session fixation attac... |
| CVE-2020-6625 | HIGH | 7.1 | 1.4% | Jan 9, 2020 | jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c. |
| CVE-2020-6624 | HIGH | 7.1 | 1.4% | Jan 9, 2020 | jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c. |
| CVE-2020-6623 | HIGH | 8.8 | 1.5% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index. |
| CVE-2020-6622 | HIGH | 8.8 | 1.4% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8. |
| CVE-2020-6621 | HIGH | 8.8 | 1.1% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT. |
| CVE-2020-6620 | HIGH | 8.8 | 1.1% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8. |
| CVE-2020-6619 | HIGH | 8.8 | 1.1% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek. |
| CVE-2020-6618 | HIGH | 8.8 | 1.1% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table. |
| CVE-2020-6617 | HIGH | 8.8 | 1.1% | Jan 8, 2020 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int. |
| CVE-2020-6615 | MEDIUM | 6.5 | 1.5% | Jan 8, 2020 | GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated... |
| CVE-2020-6614 | HIGH | 8.1 | 1.7% | Jan 8, 2020 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c. |
| CVE-2020-6613 | HIGH | 8.1 | 1.7% | Jan 8, 2020 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c. |
| CVE-2020-6612 | HIGH | 8.1 | 1.7% | Jan 8, 2020 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c. |
| CVE-2020-6611 | MEDIUM | 6.5 | 1.5% | Jan 8, 2020 | GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c. |
| CVE-2020-6610 | MEDIUM | 6.5 | 1.4% | Jan 8, 2020 | GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c. |
| CVE-2020-6609 | HIGH | 8.8 | 1.8% | Jan 8, 2020 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c. |
| CVE-2020-6583 | MEDIUM | 6.1 | 0.7% | Jan 8, 2020 | BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can e... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now