2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-8350HIGH8.8An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 th...
CVE-2020-8345HIGH7.8A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feat...
CVE-2020-8338HIGH7.8A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with ...
CVE-2020-7383HIGH8.1A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low p...
CVE-2020-3427HIGH7.8The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker wi...
CVE-2020-9746HIGH8.8Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerabilit...
CVE-2020-0423HIGH7.8In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local...
CVE-2020-0421HIGH7.8In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lea...
CVE-2020-0420HIGH7.8In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. Th...
CVE-2020-0416HIGH8.8In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to...
CVE-2020-0413HIGH7.5In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. Th...
CVE-2020-0408HIGH7.8In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local ...
CVE-2020-0377HIGH7.5In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. Th...
CVE-2020-6087HIGH7.5An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradl...
CVE-2020-6086HIGH7.5An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradl...
CVE-2020-6083HIGH7.5An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradl...
CVE-2020-25188HIGH7.8An attacker who convinces a valid user to open a specially crafted project file to exploit could execute code under the ...
CVE-2020-7330HIGH8.8Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to sched...
CVE-2020-12928HIGH7.8A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate ...
CVE-2020-25645HIGH7.5A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted...
CVE-2020-17417HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35...
CVE-2020-17416HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35...
CVE-2020-17415HIGH7.8This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35...
CVE-2020-17414HIGH7.8This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798....
CVE-2020-17413HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0....

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now