2020 CVE Vulnerabilities
21,069 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7335 | HIGH | 7.8 | 0.4% | Dec 1, 2020 | Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows loc... |
| CVE-2020-9117 | HIGH | 7.8 | 0.2% | Dec 1, 2020 | HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5)... |
| CVE-2020-9114 | HIGH | 7.8 | 0.2% | Dec 1, 2020 | FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability. Due to improper p... |
| CVE-2020-9116 | HIGH | 7.2 | 1.0% | Dec 1, 2020 | Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker ... |
| CVE-2020-9115 | HIGH | 7.2 | 1.4% | Dec 1, 2020 | ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command... |
| CVE-2020-16850 | HIGH | 7.5 | 2.1% | Nov 30, 2020 | Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by ... |
| CVE-2020-16849 | HIGH | 7.5 | 1.1% | Nov 30, 2020 | An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in... |
| CVE-2020-8351 | HIGH | 7.8 | 0.3% | Nov 30, 2020 | A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an a... |
| CVE-2020-29394 | HIGH | 7.8 | 1.9% | Nov 30, 2020 | A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log ... |
| CVE-2020-29383 | HIGH | 7.8 | 0.3% | Nov 29, 2020 | An issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. A hardcoded RSA private key (sp... |
| CVE-2020-29382 | HIGH | 7.8 | 0.3% | Nov 29, 2020 | An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices... |
| CVE-2020-29378 | HIGH | 8.8 | 1.1% | Nov 29, 2020 | An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 a... |
| CVE-2020-29375 | HIGH | 8.8 | 0.8% | Nov 29, 2020 | An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 a... |
| CVE-2020-29370 | HIGH | 7 | 0.6% | Nov 28, 2020 | An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the ... |
| CVE-2020-29369 | HIGH | 7 | 0.4% | Nov 28, 2020 | An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand... |
| CVE-2020-29368 | HIGH | 7 | 0.4% | Nov 28, 2020 | An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write impl... |
| CVE-2020-29367 | HIGH | 7.8 | 1.2% | Nov 27, 2020 | blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write ... |
| CVE-2020-28922 | HIGH | 8.8 | 0.7% | Nov 27, 2020 | An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL fun... |
| CVE-2020-28921 | HIGH | 8.8 | 0.6% | Nov 27, 2020 | An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL fun... |
| CVE-2020-25708 | HIGH | 7.5 | 1.6% | Nov 27, 2020 | A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a speci... |
| CVE-2020-10772 | HIGH | 7.5 | 1.3% | Nov 27, 2020 | An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020... |
| CVE-2020-7780 | HIGH | 8.8 | 0.6% | Nov 27, 2020 | This affects the package com.softwaremill.akka-http-session:core_2.13 before 0.5.11; the package com.softwaremill.akka-h... |
| CVE-2020-26936 | HIGH | 8.8 | 0.4% | Nov 26, 2020 | Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack. |
| CVE-2020-29043 | HIGH | 7.5 | 1.4% | Nov 26, 2020 | An issue was discovered in BigBlueButton through 2.2.29. When at attacker is able to view an account_activations/edit?to... |
| CVE-2020-27207 | HIGH | 7.5 | 1.6% | Nov 26, 2020 | Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now