SecvalisbySYSDEVOPS.EU

CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.27)

AllCriticalHighMediumLowActively exploited133,666 results

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2020-16017
CriticalActively exploited

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2020-16013
HighActively exploited

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-26664
HighEPSS 70%

A vulnerability in the EbmlTypeDispatcher::send function of VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.

CVE-2020-26977
MediumEPSS 55%

By attempting to connect to a website using an unresponsive port, an attacker could control the content of a tab while the URL bar displayed the original domain. Affects Firefox for Android < 84.

CVE-2020-26975
MediumEPSS 56%

A malicious app on the user's device could broadcast an Intent to Firefox for Android with arbitrary headers, leading to attacks such as abusing ambient authority or session fixation. This was fixed by only allowing certain safe-listed headers. Affects Firefox < 84.

CVE-2020-36183
HighEPSS 91%

FasterXML jackson-databind w wersjach 2.x przed 2.9.10.8 niewłaściwie obsługuje interakcję między gadżetami serializacyjnymi a typowaniem, co jest związane z org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.

CVE-2020-36182
HighEPSS 92%

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.

CVE-2020-36180
HighEPSS 92%

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.

CVE-2020-36179
HighEPSS 97%

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.

CVE-2020-36189
HighEPSS 91%

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.

CVE-2020-36188
HighEPSS 96%

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.

CVE-2020-36187
HighEPSS 92%

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.

CVE-2020-36186
HighEPSS 92%

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.

CVE-2020-36185
HighEPSS 92%

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.

CVE-2020-36184
HighEPSS 95%

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.

CVE-2020-36181
HighEPSS 92%

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.

CVE-2020-35262
MediumEPSS 54%

Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 router. The flaw exists in the Time and Date module (NTP server name field) and URL Filter (Keyword field).

CVE-2020-25498
MediumEPSS 61%

A Cross Site Scripting (XSS) vulnerability in the Beetel router 777VR1 can be exploited via the NTP server name in System Time and the "Keyword" field in URL Filter.

CVE-2020-27283
Medium

Atakujący może wysłać specjalnie przygotowaną wiadomość do Crimson 3.1 (wersje kompilacji przed 3119.001), co może prowadzić do wycieku dowolnych lokalizacji pamięci.

CVE-2020-27279
High

Zidentyfikowano podatność na dereferencję wskaźnika NULL w konwerterze protokołów. Atakujący może wysłać specjalnie przygotowany pakiet, który może zrestartować urządzenie działające na Crimson 3.1 (wersje kompilacji przed 3119.001).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS