2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7324 | MEDIUM | 6.1 | 0.3% | Sep 9, 2020 | Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass secur... |
| CVE-2020-7323 | MEDIUM | 6.9 | 0.3% | Sep 9, 2020 | Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2... |
| CVE-2020-7322 | MEDIUM | 4.7 | 0.2% | Sep 9, 2020 | Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update... |
| CVE-2020-5627 | MEDIUM | 6.1 | 0.9% | Sep 9, 2020 | Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary websi... |
| CVE-2020-3679 | MEDIUM | 5.5 | 0.3% | Sep 9, 2020 | u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known... |
| CVE-2020-3674 | MEDIUM | 5.5 | 0.2% | Sep 9, 2020 | Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdr... |
| CVE-2020-4698 | MEDIUM | 5.4 | 0.6% | Sep 8, 2020 | IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored... |
| CVE-2020-4516 | MEDIUM | 5.4 | 0.8% | Sep 8, 2020 | IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-... |
| CVE-2020-3702 | MEDIUM | 6.5 | 0.3% | Sep 8, 2020 | u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi... |
| CVE-2020-3644 | MEDIUM | 5.5 | 0.2% | Sep 8, 2020 | u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display s... |
| CVE-2020-3643 | MEDIUM | 5.5 | 0.2% | Sep 8, 2020 | u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snap... |
| CVE-2020-3621 | MEDIUM | 5.5 | 0.2% | Sep 8, 2020 | u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIF... |
| CVE-2020-3620 | MEDIUM | 5.5 | 0.2% | Sep 8, 2020 | u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM tr... |
| CVE-2020-11122 | MEDIUM | 5.5 | 0.4% | Sep 8, 2020 | u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' i... |
| CVE-2020-15709 | MEDIUM | 5.5 | 0.3% | Sep 5, 2020 | Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (p... |
| CVE-2020-24981 | MEDIUM | 5.3 | 1.0% | Sep 4, 2020 | An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an... |
| CVE-2020-24963 | MEDIUM | 5.4 | 1.9% | Sep 4, 2020 | An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4. |
| CVE-2020-7299 | MEDIUM | 4.1 | 0.4% | Sep 4, 2020 | Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) p... |
| CVE-2020-4702 | MEDIUM | 5.4 | 0.6% | Sep 4, 2020 | IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to ... |
| CVE-2020-4632 | MEDIUM | 6.5 | 0.9% | Sep 4, 2020 | IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted ... |
| CVE-2020-7119 | MEDIUM | 4.9 | 0.7% | Sep 4, 2020 | A vulnerability exists in the Aruba Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier fir... |
| CVE-2020-3547 | MEDIUM | 6.5 | 0.9% | Sep 4, 2020 | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA)... |
| CVE-2020-3546 | MEDIUM | 5.3 | 1.1% | Sep 4, 2020 | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA)... |
| CVE-2020-3545 | MEDIUM | 6.7 | 0.4% | Sep 4, 2020 | A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to c... |
| CVE-2020-3542 | MEDIUM | 5.3 | 1.1% | Sep 4, 2020 | A vulnerability in Cisco Webex Training could allow an authenticated, remote attacker to join a password-protected meeti... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now