2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2020-1472MEDIUM5.5An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connect...
CVE-2020-1455MEDIUM5.3A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An...
CVE-2020-1417MEDIUM5.5An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An at...
CVE-2020-1383MEDIUM5.5An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker w...
CVE-2020-1379MEDIUM5.5A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker...
CVE-2020-3502MEDIUM4.1Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote ...
CVE-2020-3501MEDIUM4.1Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote ...
CVE-2020-3472MEDIUM5A vulnerability in the contacts feature of Cisco Webex Meetings could allow an authenticated, remote attacker with a leg...
CVE-2020-3464MEDIUM4.8A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacke...
CVE-2020-3463MEDIUM6.1A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote att...
CVE-2020-3449MEDIUM4.3A vulnerability in the Border Gateway Protocol (BGP) additional paths feature of Cisco IOS XR Software could allow an un...
CVE-2020-3448MEDIUM5.8A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, rem...
CVE-2020-3447MEDIUM6.5A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content...
CVE-2020-3435MEDIUM5.5A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows c...
CVE-2020-3434MEDIUM5.5A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows c...
CVE-2020-3413MEDIUM4.3A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote a...
CVE-2020-3412MEDIUM4.3A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote a...
CVE-2020-3346MEDIUM6.1A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Mana...
CVE-2020-24371MEDIUM5.3lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation...
CVE-2020-24370MEDIUM5.3ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by get...
CVE-2020-9237MEDIUM6.7Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability. ...
CVE-2020-8232MEDIUM6.5An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could ...
CVE-2020-8230MEDIUM5.5A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in fo...
CVE-2020-8226MEDIUM5.8A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF.
CVE-2020-8208MEDIUM6.1Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix ...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now