2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9095 | MEDIUM | 5.5 | 0.2% | Aug 21, 2020 | HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160(C00E160R2P8) has an integer overflow vulnerability. Some... |
| CVE-2020-24585 | MEDIUM | 5.3 | 0.9% | Aug 21, 2020 | An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messag... |
| CVE-2020-3976 | MEDIUM | 5.3 | 2.1% | Aug 21, 2020 | VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication serv... |
| CVE-2020-16239 | MEDIUM | 4.9 | 0.9% | Aug 21, 2020 | When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficie... |
| CVE-2020-14518 | MEDIUM | 5.3 | 1.3% | Aug 21, 2020 | Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker. |
| CVE-2020-7310 | MEDIUM | 6.9 | 0.3% | Aug 21, 2020 | Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 all... |
| CVE-2020-14194 | MEDIUM | 5.4 | 0.7% | Aug 21, 2020 | Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link. |
| CVE-2020-12759 | MEDIUM | 6.1 | 0.7% | Aug 21, 2020 | Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook. |
| CVE-2020-12619 | MEDIUM | 5.9 | 0.4% | Aug 20, 2020 | MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowe... |
| CVE-2020-12618 | MEDIUM | 4.8 | 0.3% | Aug 20, 2020 | eM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently replaced existing ones. Thi... |
| CVE-2020-4687 | MEDIUM | 4.3 | 1.0% | Aug 20, 2020 | IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they... |
| CVE-2020-16280 | MEDIUM | 5.5 | 0.3% | Aug 20, 2020 | Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several ex... |
| CVE-2020-15634 | MEDIUM | 6.3 | 1.4% | Aug 20, 2020 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R670... |
| CVE-2020-15532 | MEDIUM | 6.5 | 1.2% | Aug 20, 2020 | Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air denia... |
| CVE-2020-15119 | MEDIUM | 5.4 | 0.5% | Aug 20, 2020 | In auth0-lock versions before and including 11.25.1, dangerouslySetInnerHTML is used to update the DOM. When dangerously... |
| CVE-2020-13825 | MEDIUM | 6.1 | 0.8% | Aug 20, 2020 | A cross-site scripting (XSS) vulnerability in i-doit 1.14.2 allows remote attackers to inject arbitrary web script or HT... |
| CVE-2020-23574 | MEDIUM | 6.5 | 0.9% | Aug 19, 2020 | When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uplo... |
| CVE-2020-9712 | MEDIUM | 5.5 | 3.4% | Aug 19, 2020 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.3... |
| CVE-2020-9703 | MEDIUM | 5.5 | 2.4% | Aug 19, 2020 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.3... |
| CVE-2020-9702 | MEDIUM | 5.5 | 2.4% | Aug 19, 2020 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.3... |
| CVE-2020-9697 | MEDIUM | 5.5 | 3.1% | Aug 19, 2020 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.3... |
| CVE-2020-9696 | MEDIUM | 5.5 | 2.5% | Aug 19, 2020 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.3... |
| CVE-2020-4653 | MEDIUM | 6.1 | 0.7% | Aug 19, 2020 | IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By ... |
| CVE-2020-4648 | MEDIUM | 6.5 | 0.9% | Aug 19, 2020 | A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified ... |
| CVE-2020-4381 | MEDIUM | 6.5 | 1.0% | Aug 19, 2020 | IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.6 could allow an authenticated user to cause a denia... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now