2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0648 | HIGH | 7.8 | 1.0% | Sep 11, 2020 | <p>An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory.</... |
| CVE-2020-25276 | HIGH | 7.3 | 0.5% | Sep 11, 2020 | An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the E... |
| CVE-2020-15166 | HIGH | 7.5 | 3.4% | Sep 11, 2020 | In ZeroMQ before version 4.3.3, there is a denial-of-service vulnerability. Users with TCP transport public endpoints, e... |
| CVE-2020-11991 | HIGH | 7.5 | 73.1% | Sep 11, 2020 | When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system e... |
| CVE-2020-16222 | HIGH | 8.8 | 0.6% | Sep 11, 2020 | In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when... |
| CVE-2020-24164 | HIGH | 7.8 | 1.1% | Sep 11, 2020 | A deserialization flaw is present in Taoensso Nippy before 2.14.2. In some circumstances, it is possible for an attacker... |
| CVE-2020-25255 | HIGH | 7.5 | 1.5% | Sep 11, 2020 | An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 an... |
| CVE-2020-25252 | HIGH | 8.8 | 0.5% | Sep 11, 2020 | An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16... |
| CVE-2020-25250 | HIGH | 7.5 | 0.9% | Sep 11, 2020 | An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 an... |
| CVE-2020-25248 | HIGH | 7.5 | 2.1% | Sep 11, 2020 | An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16... |
| CVE-2020-25247 | HIGH | 7.5 | 1.5% | Sep 11, 2020 | An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for ... |
| CVE-2020-9731 | HIGH | 7.8 | 11.3% | Sep 10, 2020 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious ind... |
| CVE-2020-9730 | HIGH | 7.8 | 2.7% | Sep 10, 2020 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious ind... |
| CVE-2020-9729 | HIGH | 7.8 | 2.7% | Sep 10, 2020 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious ind... |
| CVE-2020-9728 | HIGH | 7.8 | 2.7% | Sep 10, 2020 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious ind... |
| CVE-2020-9727 | HIGH | 7.8 | 3.1% | Sep 10, 2020 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious ind... |
| CVE-2020-9725 | HIGH | 7.8 | 3.7% | Sep 10, 2020 | Adobe FrameMaker version 2019.0.6 (and earlier versions) lacks proper validation of the length of user-supplied data pri... |
| CVE-2020-15170 | HIGH | 7 | 1.3% | Sep 10, 2020 | apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to inte... |
| CVE-2020-9733 | HIGH | 7.5 | 3.8% | Sep 10, 2020 | An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high ... |
| CVE-2020-17408 | HIGH | 7.5 | 74.0% | Sep 10, 2020 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressClu... |
| CVE-2020-14198 | HIGH | 7.5 | 3.4% | Sep 10, 2020 | Bitcoin Core 0.20.0 allows remote denial of service. |
| CVE-2020-6097 | HIGH | 7.5 | 2.4% | Sep 10, 2020 | An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1... |
| CVE-2020-25221 | HIGH | 7.8 | 0.7% | Sep 10, 2020 | get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorr... |
| CVE-2020-7314 | HIGH | 7.8 | 0.4% | Sep 10, 2020 | Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAf... |
| CVE-2020-7312 | HIGH | 7.8 | 0.3% | Sep 10, 2020 | DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local u... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now