2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6366 | MEDIUM | 6.5 | 1.1% | Oct 20, 2020 | SAP NetWeaver (Compare Systems) versions - 7.20, 7.30, 7.40, 7.50, does not sufficiently validate uploaded XML documents... |
| CVE-2020-6362 | MEDIUM | 6.5 | 1.0% | Oct 20, 2020 | SAP Banking Services version 500, use an incorrect authorization object in some of its reports. Although the affected re... |
| CVE-2020-6315 | MEDIUM | 5.5 | 0.8% | Oct 20, 2020 | SAP 3D Visual Enterprise Viewer, version 9, allows an attacker to send certain manipulated file to the victim, which can... |
| CVE-2020-6308 | MEDIUM | 5.3 | 61.7% | Oct 20, 2020 | SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated at... |
| CVE-2020-7747 | MEDIUM | 6.3 | 0.9% | Oct 20, 2020 | This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a s... |
| CVE-2020-15261 | MEDIUM | 6.7 | 11.1% | Oct 19, 2020 | On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally auth... |
| CVE-2020-15263 | MEDIUM | 6.1 | 0.7% | Oct 19, 2020 | In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not e... |
| CVE-2020-15245 | MEDIUM | 4.3 | 0.6% | Oct 19, 2020 | In Sylius before versions 1.6.9, 1.7.9 and 1.8.3, the user may register in a shop by email mail@example.com, verify it, ... |
| CVE-2020-13937 | MEDIUM | 5.3 | 78.8% | Oct 19, 2020 | Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.... |
| CVE-2020-10746 | MEDIUM | 6.1 | 0.2% | Oct 19, 2020 | A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to c... |
| CVE-2020-9111 | MEDIUM | 4.5 | 0.3% | Oct 19, 2020 | E6878-370 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP21C233) and E6878-870 versions 10.0.3.1(H557SP27C233),10.0.3.1(... |
| CVE-2020-9092 | MEDIUM | 4.6 | 0.3% | Oct 19, 2020 | HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does no... |
| CVE-2020-24375 | MEDIUM | 6.5 | 1.1% | Oct 19, 2020 | A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. |
| CVE-2020-11496 | MEDIUM | 6.7 | 0.3% | Oct 19, 2020 | Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering data to insert arbitra... |
| CVE-2020-26891 | MEDIUM | 6.1 | 1.9% | Oct 19, 2020 | AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET para... |
| CVE-2020-8929 | MEDIUM | 5.3 | 0.5% | Oct 19, 2020 | A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker... |
| CVE-2020-15910 | MEDIUM | 4.7 | 5.5% | Oct 19, 2020 | SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible... |
| CVE-2020-13893 | MEDIUM | 5.4 | 0.5% | Oct 18, 2020 | Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to in... |
| CVE-2020-16978 | MEDIUM | 5.4 | 1.3% | Oct 16, 2020 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp... |
| CVE-2020-16956 | MEDIUM | 5.4 | 1.3% | Oct 16, 2020 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp... |
| CVE-2020-16953 | MEDIUM | 6.5 | 3.6% | Oct 16, 2020 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m... |
| CVE-2020-16950 | MEDIUM | 5 | 3.9% | Oct 16, 2020 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m... |
| CVE-2020-16949 | MEDIUM | 4.7 | 2.7% | Oct 16, 2020 | <p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle obj... |
| CVE-2020-16948 | MEDIUM | 6.5 | 3.6% | Oct 16, 2020 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m... |
| CVE-2020-16943 | MEDIUM | 6.5 | 1.1% | Oct 16, 2020 | <p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who su... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now