2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5519 | CRITICAL | 9.8 | 1.2% | Jan 6, 2020 | The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server... |
| CVE-2020-5192 | HIGH | 8.8 | 16.8% | Jan 6, 2020 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages an... |
| CVE-2020-5191 | MEDIUM | 6.1 | 5.5% | Jan 6, 2020 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities. |
| CVE-2020-5306 | MEDIUM | 4.8 | 1.1% | Jan 5, 2020 | Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content. |
| CVE-2020-5305 | MEDIUM | 4.8 | 0.6% | Jan 5, 2020 | Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen. |
| CVE-2020-5499 | CRITICAL | 9.8 | 3.2% | Jan 4, 2020 | Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two gl... |
| CVE-2020-5497 | MEDIUM | 6.1 | 2.1% | Jan 4, 2020 | The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being inclu... |
| CVE-2020-5496 | HIGH | 8.8 | 2.4% | Jan 3, 2020 | FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c. |
| CVE-2020-5395 | HIGH | 8.8 | 2.5% | Jan 3, 2020 | FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c. |
| CVE-2020-1871 | HIGH | 8.2 | 0.6% | Jan 3, 2020 | USG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100; ... |
| CVE-2020-1785 | MEDIUM | 5.5 | 0.5% | Jan 3, 2020 | Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly c... |
| CVE-2020-5313 | HIGH | 7.1 | 2.8% | Jan 3, 2020 | libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. |
| CVE-2020-5312 | CRITICAL | 9.8 | 3.7% | Jan 3, 2020 | libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. |
| CVE-2020-5311 | CRITICAL | 9.8 | 4.2% | Jan 3, 2020 | libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow. |
| CVE-2020-5310 | HIGH | 8.8 | 2.0% | Jan 3, 2020 | libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc. |
| CVE-2020-5179 | HIGH | 7.2 | 2.8% | Jan 2, 2020 | Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by nav... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now