2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-24668 | MEDIUM | 5.4 | 0.5% | Jun 10, 2021 | Trace Financial Crest Bridge <6.3.0.02 contains a stored XSS vulnerability, which was fixed in 6.3.0.03. |
| CVE-2020-24667 | HIGH | 8.8 | 1.0% | Jun 10, 2021 | Trace Financial CRESTBridge <6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03... |
| CVE-2020-24663 | MEDIUM | 5.4 | 0.5% | Jun 10, 2021 | Trace Financial CRESTBridge <6.3.0.02 contains a stored XSS vulnerability, which was fixed in 6.3.0.03. |
| CVE-2020-24662 | MEDIUM | 5.4 | 0.5% | Jun 10, 2021 | SmartStream Transaction Lifecycle Management (TLM) Reconciliation Premium (RP) <3.1.0 allows XSS. This was fixed in TLM ... |
| CVE-2020-35452 | HIGH | 7.3 | 53.2% | Jun 10, 2021 | Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_dige... |
| CVE-2020-13950 | HIGH | 7.5 | 49.1% | Jun 10, 2021 | Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with special... |
| CVE-2020-13938 | MEDIUM | 5.5 | 11.8% | Jun 10, 2021 | Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows |
| CVE-2020-24489 | HIGH | 8.8 | 0.4% | Jun 9, 2021 | Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of pr... |
| CVE-2020-24475 | MEDIUM | 5.5 | 0.2% | Jun 9, 2021 | Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before v... |
| CVE-2020-24474 | HIGH | 8 | 0.4% | Jun 9, 2021 | Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2... |
| CVE-2020-24473 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before versi... |
| CVE-2020-8704 | MEDIUM | 6.4 | 0.2% | Jun 9, 2021 | Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially ... |
| CVE-2020-8703 | MEDIUM | 6.7 | 0.3% | Jun 9, 2021 | Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 1... |
| CVE-2020-8702 | HIGH | 7.3 | 0.3% | Jun 9, 2021 | Uncontrolled search path element in the Intel(R) Processor Diagnostic Tool before version 4.1.5.37 may allow an authenti... |
| CVE-2020-8700 | MEDIUM | 6.7 | 0.3% | Jun 9, 2021 | Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable... |
| CVE-2020-8670 | MEDIUM | 6.4 | 0.3% | Jun 9, 2021 | Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation... |
| CVE-2020-27383 | HIGH | 7.8 | 0.3% | Jun 9, 2021 | Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an ... |
| CVE-2020-24516 | MEDIUM | 6.8 | 0.3% | Jun 9, 2021 | Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32... |
| CVE-2020-24515 | MEDIUM | 6.8 | 0.3% | Jun 9, 2021 | Protection mechanism failure in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable ... |
| CVE-2020-24514 | MEDIUM | 6.8 | 0.3% | Jun 9, 2021 | Improper authentication in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escal... |
| CVE-2020-24513 | MEDIUM | 6.5 | 0.5% | Jun 9, 2021 | Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to pote... |
| CVE-2020-24512 | LOW | 3.3 | 0.4% | Jun 9, 2021 | Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable informat... |
| CVE-2020-24511 | MEDIUM | 6.5 | 0.4% | Jun 9, 2021 | Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable... |
| CVE-2020-24509 | MEDIUM | 6.7 | 0.3% | Jun 9, 2021 | Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS_E3_05.01.04.300.0, SPS_SoC-A_05.00... |
| CVE-2020-24507 | MEDIUM | 4.4 | 0.3% | Jun 9, 2021 | Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.4... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now