2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2020-25280MEDIUM6.8An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos and MediaTek chipsets) software. Unauthenticated ...
CVE-2020-14332MEDIUM5.5A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not prop...
CVE-2020-14330MEDIUM5.5An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is ...
CVE-2020-1598MEDIUM6.1<p>An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly han...
CVE-2020-1596MEDIUM5.4<p>A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfu...
CVE-2020-1592MEDIUM4.4<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p> ...
CVE-2020-1590MEDIUM6.6<p>An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly h...
CVE-2020-1589MEDIUM4.4<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attac...
CVE-2020-1575MEDIUM5.4<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci...
CVE-2020-1514MEDIUM5.4<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci...
CVE-2020-1506MEDIUM6.1<p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. An attacker...
CVE-2020-1482MEDIUM6.3<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci...
CVE-2020-1440MEDIUM6.3<p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker ...
CVE-2020-1303MEDIUM5.5<p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An atta...
CVE-2020-1256MEDIUM5.5<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of it...
CVE-2020-1250MEDIUM5.5<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An a...
CVE-2020-1227MEDIUM5.4<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci...
CVE-2020-1224MEDIUM5.5<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. ...
CVE-2020-1205MEDIUM4.6<p>A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web r...
CVE-2020-1180MEDIUM4.2<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memor...
CVE-2020-1172MEDIUM4.2<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memor...
CVE-2020-1159MEDIUM6.6<p>An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protect...
CVE-2020-1152MEDIUM5.8<p>An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who s...
CVE-2020-1146MEDIUM6.6<p>An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.</p> <p>To ...
CVE-2020-1133MEDIUM5.5<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file op...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now