| CVE-2020-7068 |
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension,... |
Low |
php:7.4, php-pecl-zip |
是 |
完成修复 |
2020-08-05 |
2026-07-10 |
| CVE-2020-14347 |
|
Moderate |
xorg-x11-server, libwacom |
是 |
完成修复 |
2020-07-30 |
2026-03-23 |
| CVE-2020-14344 |
|
Moderate |
xorg-x11-server, libwacom |
是 |
完成修复 |
2020-07-30 |
2026-03-23 |
| CVE-2020-16135 |
|
Low |
libssh |
是 |
完成修复 |
2020-07-29 |
2026-03-23 |
| CVE-2020-16117 |
In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by ... |
Moderate |
evolution-data-server, evolution, evolution-mapi, evolution-ews |
是 |
完成修复 |
2020-07-29 |
2026-03-27 |
| CVE-2020-9925 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-28 |
2026-03-23 |
| CVE-2020-9915 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-28 |
2026-03-23 |
| CVE-2020-9895 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-28 |
2026-03-23 |
| CVE-2020-9894 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-28 |
2026-03-23 |
| CVE-2020-9893 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-28 |
2026-03-23 |
| CVE-2020-9862 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-28 |
2026-03-23 |
| CVE-2020-12403 |
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, i... |
Moderate |
nss |
是 |
完成修复 |
2020-07-27 |
2026-03-27 |
| CVE-2020-12400 |
|
Moderate |
nss |
是 |
完成修复 |
2020-07-27 |
2026-03-23 |
| CVE-2020-16092 |
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）软件开发者的一套模拟处理器软件。该软... |
Low |
virt:an, libvirt |
否 |
完成修复 |
2020-07-26 |
2025-12-18 |
| CVE-2020-24370 |
|
Low |
lua |
是 |
完成修复 |
2020-07-23 |
2026-03-27 |
| CVE-2020-14343 |
A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code executio... |
Moderate |
PyYAML, python-types-pyyaml, python3.11-pyyaml, python38:3.8, python39:3.9, python27:2.7 |
是 |
完成修复 |
2020-07-22 |
2026-03-23 |
| CVE-2020-14928 |
evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "be... |
Moderate |
bogofilter, evolution-mapi, evolution-data-server, openchange, evolution |
是 |
完成修复 |
2020-07-17 |
2026-07-11 |
| CVE-2020-14339 |
A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descrip... |
Important |
qemu |
否 |
完成修复 |
2020-07-16 |
2025-12-09 |
| CVE-2020-15859 |
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）软件开发者的一套模拟处理器软件。该软... |
Moderate |
libvirt, virt:an |
否 |
完成修复 |
2020-07-15 |
2025-12-18 |
| CVE-2020-14664 |
Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: ... |
Important |
java-11-openjdk |
否 |
完成修复 |
2020-07-15 |
2025-12-05 |
| CVE-2020-14581 |
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected ... |
Low |
java-11-openjdk, java-1.8.0-openjdk |
否 |
完成修复 |
2020-07-15 |
2025-12-05 |
| CVE-2020-15586 |
Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReversePro... |
Moderate |
golang, go-toolset:an8 |
是 |
完成修复 |
2020-07-14 |
2025-12-10 |
| CVE-2020-9850 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-09 |
2026-03-23 |
| CVE-2020-9843 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-09 |
2026-03-23 |
| CVE-2020-9807 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-09 |
2026-03-23 |
| CVE-2020-9806 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-09 |
2026-03-23 |
| CVE-2020-9805 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-09 |
2026-03-23 |
| CVE-2020-9803 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-09 |
2026-03-23 |
| CVE-2020-9802 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-07-09 |
2026-03-23 |
| CVE-2020-15945 |
Lua through 5.4.0 has a segmentation fault in changedline in ldebug.c (e.g., when called by luaG_traceexec) because it incorrec... |
Moderate |
lua |
是 |
完成修复 |
2020-07-09 |
2026-03-30 |
| CVE-2019-17638 |
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an excepti... |
Important |
jetty |
否 |
完成修复 |
2020-07-09 |
2026-01-06 |
| CVE-2020-15095 |
|
Moderate |
nodejs, nodejs:10 |
是 |
完成修复 |
2020-07-06 |
2026-03-23 |
| CVE-2020-15503 |
LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp... |
Important |
LibRaw |
否 |
完成修复 |
2020-07-02 |
2026-01-05 |
| CVE-2020-11538 |
In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, ... |
Important |
python-pillow |
否 |
完成修复 |
2020-07-01 |
2026-01-04 |
| CVE-2020-5238 |
|
Moderate |
pandoc |
是 |
完成修复 |
2020-06-30 |
2026-03-30 |
| CVE-2019-14560 |
|
Moderate |
edk2 |
是 |
完成修复 |
2020-06-30 |
2026-03-30 |
| CVE-2020-12401 |
|
Moderate |
nss |
是 |
完成修复 |
2020-06-29 |
2026-03-30 |
| CVE-2020-15389 |
|
Low |
openjpeg2 |
是 |
完成修复 |
2020-06-27 |
2026-03-23 |
| CVE-2020-10753 |
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HT... |
Moderate |
ceph |
是 |
完成修复 |
2020-06-26 |
2026-03-30 |
| CVE-2020-10379 |
In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c. |
Important |
python-pillow |
否 |
完成修复 |
2020-06-25 |
2026-01-04 |
| CVE-2020-14019 |
|
Moderate |
python-rtslib |
是 |
完成修复 |
2020-06-18 |
2026-03-30 |
| CVE-2020-14400 |
DISPUTED An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers i... |
Low |
libvncserver, vino |
是 |
完成修复 |
2020-06-17 |
2026-03-23 |
| CVE-2020-14399 |
DISPUTED An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers i... |
Low |
libvncserver, vino |
是 |
完成修复 |
2020-06-17 |
2026-03-23 |
| CVE-2020-8619 |
|
Moderate |
bind |
是 |
完成修复 |
2020-06-16 |
2026-03-30 |
| CVE-2018-21247 |
|
Moderate |
libvncserver |
否 |
完成修复 |
2020-06-16 |
2026-01-25 |
| CVE-2020-14155 |
|
Low |
pcre |
否 |
完成修复 |
2020-06-14 |
2026-01-25 |
| CVE-2019-20838 |
|
Low |
pcre |
否 |
完成修复 |
2020-06-14 |
2026-01-25 |
| CVE-2020-7070 |
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie valu... |
Low |
php-pecl-zip, php:7.4 |
是 |
完成修复 |
2020-06-13 |
2026-07-10 |
| CVE-2020-13962 |
|
Moderate |
qt5-qtwebsockets, qt5-qtbase |
是 |
完成修复 |
2020-06-08 |
2026-03-23 |
| CVE-2020-13867 |
|
Moderate |
targetcli |
是 |
完成修复 |
2020-06-04 |
2026-03-30 |
| CVE-2020-10702 |
A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 ... |
Moderate |
virt:an, qemu, qemu-kvm-ma, qemu-kvm |
否 |
完成修复 |
2020-06-04 |
2025-12-18 |
| CVE-2020-29368 |
An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementat... |
Important |
kernel:5.10, kernel:4.19, kernel |
是 |
完成修复 |
2020-06-03 |
2025-12-04 |
| CVE-2020-12723 |
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk ca... |
Important |
perl |
否 |
完成修复 |
2020-06-02 |
2026-01-05 |
| CVE-2020-10878 |
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regu... |
Important |
perl |
否 |
完成修复 |
2020-06-02 |
2026-01-05 |
| CVE-2020-6829 |
|
Moderate |
nss |
是 |
完成修复 |
2020-06-01 |
2026-03-30 |
| CVE-2020-12062 |
DISPUTED The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call fail... |
Moderate |
openssh |
是 |
完成修复 |
2020-06-01 |
2026-03-30 |
| CVE-2018-18624 |
|
Moderate |
grafana, grafana-pcp |
是 |
完成修复 |
2020-06-01 |
2026-03-27 |
| CVE-2020-12867 |
|
Moderate |
sane-backends |
是 |
完成修复 |
2020-05-31 |
2026-03-30 |
| CVE-2020-10749 |
在 0.8.6 版本之前的所有 containernetworking/plugins 版本中发现了一个漏洞，该漏洞允许 Kubernetes 集群�... |
Moderate |
container-tools:an8, udica |
是 |
完成修复 |
2020-05-31 |
2026-07-11 |
| CVE-2020-0198 |
|
Moderate |
libexif |
是 |
完成修复 |
2020-05-31 |
2026-03-30 |
| CVE-2020-0182 |
|
Low |
libexif |
是 |
完成修复 |
2020-05-31 |
2026-03-23 |
| CVE-2020-0181 |
|
Moderate |
libexif |
是 |
完成修复 |
2020-05-31 |
2026-03-30 |
| CVE-2020-12389 |
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this ... |
Important |
firefox |
否 |
完成修复 |
2020-05-26 |
2026-01-04 |
| CVE-2020-10756 |
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in ... |
Moderate |
container-tools:an8, qemu-kvm, udica |
否 |
完成修复 |
2020-05-26 |
2025-12-18 |
| CVE-2020-13114 |
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to cons... |
Important |
libexif |
否 |
完成修复 |
2020-05-21 |
2026-01-06 |
| CVE-2020-13113 |
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes ... |
Important |
libexif |
否 |
完成修复 |
2020-05-21 |
2026-01-06 |
| CVE-2020-10967 |
|
Moderate |
dovecot |
是 |
完成修复 |
2020-05-17 |
2026-03-30 |
| CVE-2020-10958 |
|
Moderate |
dovecot |
是 |
完成修复 |
2020-05-17 |
2026-03-30 |
| CVE-2020-10726 |
A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user sock... |
Moderate |
dpdk |
是 |
完成修复 |
2020-05-17 |
2026-07-13 |
| CVE-2020-10723 |
A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index... |
Moderate |
dpdk |
是 |
完成修复 |
2020-05-17 |
2026-07-13 |
| CVE-2020-10722 |
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base(... |
Moderate |
dpdk |
是 |
完成修复 |
2020-05-17 |
2026-07-13 |
| CVE-2020-7069 |
|
Moderate |
php:7.4, php-pecl-zip |
是 |
完成修复 |
2020-05-14 |
2026-07-10 |
| CVE-2020-13659 |
address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer. \nA NULL pointer dere... |
Low |
qemu |
否 |
完成修复 |
2020-05-14 |
2025-12-18 |
| CVE-2020-25708 |
|
Moderate |
libvncserver |
是 |
完成修复 |
2020-05-12 |
2026-03-27 |
| CVE-2020-12762 |
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappen... |
Important |
libfastjson, json-c |
否 |
完成修复 |
2020-05-09 |
2026-01-08 |
| CVE-2020-10737 |
A race condition was found in the mkhomedir tool shipped with the oddjob package in versions before 0.34.5 and 0.34.6 wherein, ... |
Moderate |
oddjob |
是 |
完成修复 |
2020-05-06 |
2026-07-10 |
| CVE-2020-0093 |
|
Moderate |
libexif |
是 |
完成修复 |
2020-05-03 |
2026-03-30 |
| CVE-2020-12831 |
|
Moderate |
frr |
是 |
完成修复 |
2020-05-02 |
2026-03-30 |
| CVE-2020-12279 |
An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist ... |
Low |
libgit2 |
否 |
完成修复 |
2020-04-28 |
2026-01-25 |
| CVE-2020-12243 |
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of ser... |
Important |
compat-openldap, openldap |
否 |
完成修复 |
2020-04-28 |
2026-01-07 |
| CVE-2020-3902 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-04-26 |
2026-03-23 |
| CVE-2020-3901 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-04-26 |
2026-03-23 |
| CVE-2020-3900 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-04-26 |
2026-03-23 |
| CVE-2020-3899 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-04-26 |
2026-03-23 |
| CVE-2020-3897 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-04-26 |
2026-03-23 |
| CVE-2020-3895 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-04-26 |
2026-03-23 |
| CVE-2020-3894 |
|
Low |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-04-26 |
2026-03-23 |
| CVE-2020-12459 |
|
Moderate |
grafana, grafana-pcp |
是 |
完成修复 |
2020-04-22 |
2026-07-10 |
| CVE-2020-8037 |
|
Low |
tcpdump |
是 |
完成修复 |
2020-04-19 |
2026-03-23 |
| CVE-2020-3898 |
|
Low |
cups |
是 |
完成修复 |
2020-04-19 |
2026-03-23 |
| CVE-2020-11947 |
QEMU是一套由法布里斯·贝拉(Fabrice Bellard)所编写的、以GPL许可证分发源码的模拟处理器，在GNU/Linu... |
Low |
virt:an, libvirt |
否 |
完成修复 |
2025-12-12 |
2025-12-18 |
| CVE-2020-11793 |
|
Moderate |
gnome-settings-daemon, webkit2gtk3 |
是 |
完成修复 |
2020-04-15 |
2026-03-23 |
| CVE-2020-1695 |
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, whe... |
Moderate |
tomcatjss, pki-deps:10.6 |
是 |
完成修复 |
2020-04-14 |
2026-06-26 |
| CVE-2020-1759 |
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerabil... |
Moderate |
ceph |
是 |
完成修复 |
2020-04-13 |
2026-03-30 |
| CVE-2020-1722 |
|
Low |
softhsm, idm:client, idm:DL1 |
是 |
完成修复 |
2020-04-13 |
2026-03-23 |
| CVE-2020-11736 |
|
Low |
file-roller |
是 |
完成修复 |
2020-04-11 |
2026-03-27 |
| CVE-2020-1730 |
|
Moderate |
libssh |
否 |
完成修复 |
2020-04-08 |
2026-01-25 |
| CVE-2020-11049 |
In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol pa... |
Low |
vinagre |
是 |
完成修复 |
2020-04-08 |
2026-07-09 |
| CVE-2020-11048 |
In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is... |
Low |
vinagre |
是 |
完成修复 |
2020-04-08 |
2026-07-09 |
| CVE-2020-11047 |
|
Moderate |
vinagre |
是 |
完成修复 |
2020-04-08 |
2026-03-30 |