2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28409 | MEDIUM | 5.4 | 0.5% | Nov 10, 2020 | The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as c... |
| CVE-2020-28408 | MEDIUM | 5.4 | 0.5% | Nov 10, 2020 | The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard. |
| CVE-2020-28368 | MEDIUM | 4.4 | 0.4% | Nov 10, 2020 | Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the gue... |
| CVE-2020-27403 | MEDIUM | 6.5 | 2.7% | Nov 10, 2020 | A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TC... |
| CVE-2020-6316 | MEDIUM | 4.3 | 0.8% | Nov 10, 2020 | SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in... |
| CVE-2020-26814 | MEDIUM | 4.9 | 0.9% | Nov 10, 2020 | SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys u... |
| CVE-2020-26811 | MEDIUM | 5.3 | 1.8% | Nov 10, 2020 | SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to ... |
| CVE-2020-26809 | MEDIUM | 5.3 | 2.0% | Nov 10, 2020 | SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission c... |
| CVE-2020-12485 | MEDIUM | 5.5 | 0.3% | Nov 10, 2020 | The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which c... |
| CVE-2020-5388 | MEDIUM | 6.9 | 0.3% | Nov 10, 2020 | Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vul... |
| CVE-2020-4760 | MEDIUM | 5.4 | 0.9% | Nov 10, 2020 | IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja... |
| CVE-2020-4704 | MEDIUM | 5.4 | 0.9% | Nov 10, 2020 | IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2020-4568 | MEDIUM | 5.5 | 0.7% | Nov 10, 2020 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, and 4.0 stores user credentials in plain in clear text which can be read by... |
| CVE-2020-0454 | MEDIUM | 5.5 | 0.2% | Nov 10, 2020 | In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission... |
| CVE-2020-0453 | MEDIUM | 5.5 | 0.3% | Nov 10, 2020 | In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent.... |
| CVE-2020-0450 | MEDIUM | 6.5 | 0.8% | Nov 10, 2020 | In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to r... |
| CVE-2020-0448 | MEDIUM | 5.5 | 0.1% | Nov 10, 2020 | In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to... |
| CVE-2020-0443 | MEDIUM | 5.5 | 0.3% | Nov 10, 2020 | In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to loc... |
| CVE-2020-0437 | MEDIUM | 5.5 | 0.1% | Nov 10, 2020 | In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. Thi... |
| CVE-2020-0424 | MEDIUM | 5.5 | 0.2% | Nov 10, 2020 | In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to ... |
| CVE-2020-16125 | MEDIUM | 6.8 | 1.1% | Nov 10, 2020 | gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service v... |
| CVE-2020-27693 | MEDIUM | 4.4 | 1.8% | Nov 9, 2020 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores administrative passwords using a hash that... |
| CVE-2020-27019 | MEDIUM | 5.5 | 17.9% | Nov 9, 2020 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulner... |
| CVE-2020-27018 | MEDIUM | 5.5 | 3.5% | Nov 9, 2020 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a server side request forgery vu... |
| CVE-2020-27017 | MEDIUM | 4.9 | 6.4% | Nov 9, 2020 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processin... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now