2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-16984HIGH7.3Azure Sphere Unsigned Code Execution Vulnerability
CVE-2020-16970HIGH8.1Azure Sphere Unsigned Code Execution Vulnerability
CVE-2020-25268HIGH8.8Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for ...
CVE-2020-24367HIGH7.8Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by mod...
CVE-2020-24063HIGH7.2The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.
CVE-2020-23968HIGH7.8Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on Program...
CVE-2020-28055HIGH7.8A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TC...
CVE-2020-27146HIGH8.8The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretical...
CVE-2020-26820HIGH7.2SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administra...
CVE-2020-26819HIGH8.8SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user...
CVE-2020-26818HIGH8.8SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user...
CVE-2020-26817HIGH7.8SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sourc...
CVE-2020-26815HIGH8.6SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send...
CVE-2020-26810HIGH7.5SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to ...
CVE-2020-26808HIGH7.2SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 a...
CVE-2020-28267HIGH7.5Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and m...
CVE-2020-0451HIGH8.8In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buf...
CVE-2020-0449HIGH8.8In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to...
CVE-2020-0442HIGH7.5In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation....
CVE-2020-0441HIGH7.5In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. ...
CVE-2020-0439HIGH7.8In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permiss...
CVE-2020-0438HIGH7.8In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data...
CVE-2020-0418HIGH7.8In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege wi...
CVE-2020-0409HIGH7.8In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local e...
CVE-2020-27694HIGH8.8Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 has updated a specific critical library that may ...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now