2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9103 | MEDIUM | 4.6 | 0.2% | Aug 17, 2020 | HUAWEI Mate 20 smartphones with 9.0.0.205(C00E205R2P1) have a logic error vulnerability. In a special scenario, the syst... |
| CVE-2020-17473 | MEDIUM | 5.9 | 0.7% | Aug 14, 2020 | Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker ... |
| CVE-2020-15693 | MEDIUM | 6.5 | 2.0% | Aug 14, 2020 | In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL. An injection is poss... |
| CVE-2020-15141 | MEDIUM | 4.1 | 0.9% | Aug 14, 2020 | In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client usi... |
| CVE-2020-9229 | MEDIUM | 4.4 | 0.2% | Aug 14, 2020 | FusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection of certain information, ... |
| CVE-2020-12648 | MEDIUM | 6.1 | 1.8% | Aug 14, 2020 | A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web ... |
| CVE-2020-24349 | MEDIUM | 5.5 | 0.5% | Aug 13, 2020 | njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor cons... |
| CVE-2020-24348 | MEDIUM | 5.5 | 0.4% | Aug 13, 2020 | njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c. |
| CVE-2020-24347 | MEDIUM | 5.5 | 0.4% | Aug 13, 2020 | njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c. |
| CVE-2020-24332 | MEDIUM | 5.5 | 0.6% | Aug 13, 2020 | An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of ... |
| CVE-2020-17498 | MEDIUM | 6.5 | 2.9% | Aug 13, 2020 | In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafk... |
| CVE-2020-14483 | MEDIUM | 4.3 | 0.4% | Aug 13, 2020 | A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread ... |
| CVE-2020-13286 | MEDIUM | 4.3 | 0.7% | Aug 13, 2020 | For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server... |
| CVE-2020-13281 | MEDIUM | 6.5 | 1.3% | Aug 13, 2020 | For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature |
| CVE-2020-11733 | MEDIUM | 6.7 | 1.6% | Aug 13, 2020 | An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already... |
| CVE-2020-13285 | MEDIUM | 5.4 | 1.0% | Aug 13, 2020 | For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference numbe... |
| CVE-2020-13283 | MEDIUM | 5.4 | 0.8% | Aug 13, 2020 | For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone t... |
| CVE-2020-13280 | MEDIUM | 6.5 | 1.1% | Aug 13, 2020 | For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email er... |
| CVE-2020-8720 | MEDIUM | 5.5 | 0.3% | Aug 13, 2020 | Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 m... |
| CVE-2020-8689 | MEDIUM | 6.5 | 0.6% | Aug 13, 2020 | Improper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may allow an unauthenticated us... |
| CVE-2020-8685 | MEDIUM | 4.4 | 0.3% | Aug 13, 2020 | Improper authentication in subsystem for Intel (R) LED Manager for NUC before version 1.2.3 may allow privileged user to... |
| CVE-2020-8684 | MEDIUM | 6.7 | 0.3% | Aug 13, 2020 | Improper access control in firmware for Intel(R) PAC with Arria(R) 10 GX FPGA before Intel Acceleration Stack version 1.... |
| CVE-2020-8683 | MEDIUM | 5.5 | 0.3% | Aug 13, 2020 | Improper buffer restrictions in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow ... |
| CVE-2020-8682 | MEDIUM | 5.5 | 0.3% | Aug 13, 2020 | Out of bounds read in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authent... |
| CVE-2020-8679 | MEDIUM | 5.5 | 0.3% | Aug 13, 2020 | Out-of-bounds write in Kernel Mode Driver for some Intel(R) Graphics Drivers before version 26.20.100.7755 may allow an ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now