2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15926 | MEDIUM | 6.1 | 2.8% | Aug 18, 2020 | Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct ... |
| CVE-2020-9415 | MEDIUM | 6.5 | 0.8% | Aug 18, 2020 | The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtual... |
| CVE-2020-7019 | MEDIUM | 6.5 | 1.2% | Aug 18, 2020 | In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Le... |
| CVE-2020-14333 | MEDIUM | 6.1 | 0.8% | Aug 18, 2020 | A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable par... |
| CVE-2020-13183 | MEDIUM | 6.1 | 0.6% | Aug 17, 2020 | Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over ... |
| CVE-2020-12480 | MEDIUM | 6.5 | 0.5% | Aug 17, 2020 | In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types... |
| CVE-2020-1591 | MEDIUM | 5.4 | 1.5% | Aug 17, 2020 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a speci... |
| CVE-2020-1580 | MEDIUM | 5.4 | 1.6% | Aug 17, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2020-1578 | MEDIUM | 4.7 | 0.9% | Aug 17, 2020 | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio... |
| CVE-2020-1574 | MEDIUM | 5.5 | 2.6% | Aug 17, 2020 | A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory.... |
| CVE-2020-1573 | MEDIUM | 5.5 | 1.9% | Aug 17, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2020-1567 | MEDIUM | 4.2 | 3.7% | Aug 17, 2020 | A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker c... |
| CVE-2020-1566 | MEDIUM | 4.2 | 1.7% | Aug 17, 2020 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An at... |
| CVE-2020-1510 | MEDIUM | 5.5 | 4.8% | Aug 17, 2020 | An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An atta... |
| CVE-2020-1505 | MEDIUM | 5.5 | 1.3% | Aug 17, 2020 | An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memo... |
| CVE-2020-1503 | MEDIUM | 5.5 | 4.6% | Aug 17, 2020 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An a... |
| CVE-2020-1502 | MEDIUM | 5.5 | 4.6% | Aug 17, 2020 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An a... |
| CVE-2020-1501 | MEDIUM | 5.4 | 1.7% | Aug 17, 2020 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ... |
| CVE-2020-1500 | MEDIUM | 5.4 | 1.8% | Aug 17, 2020 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ... |
| CVE-2020-1499 | MEDIUM | 5.4 | 1.8% | Aug 17, 2020 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ... |
| CVE-2020-1497 | MEDIUM | 5.5 | 4.6% | Aug 17, 2020 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An ... |
| CVE-2020-1493 | MEDIUM | 5.5 | 7.3% | Aug 17, 2020 | An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potent... |
| CVE-2020-1485 | MEDIUM | 5.5 | 1.1% | Aug 17, 2020 | An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses con... |
| CVE-2020-1483 | MEDIUM | 5 | 8.9% | Aug 17, 2020 | A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in ... |
| CVE-2020-1476 | MEDIUM | 5.5 | 1.1% | Aug 17, 2020 | An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow acc... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now