2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0249 | MEDIUM | 5.5 | 0.2% | Aug 11, 2020 | In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. T... |
| CVE-2020-0248 | MEDIUM | 5.5 | 0.2% | Aug 11, 2020 | In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. T... |
| CVE-2020-0247 | MEDIUM | 5.5 | 0.1% | Aug 11, 2020 | In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. This... |
| CVE-2020-0239 | MEDIUM | 5.5 | 0.2% | Aug 11, 2020 | In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due to... |
| CVE-2020-9403 | MEDIUM | 5.5 | 0.3% | Aug 11, 2020 | In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in a recoverable format, and may be retrieved b... |
| CVE-2020-9244 | MEDIUM | 6.8 | 0.2% | Aug 11, 2020 | HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than ... |
| CVE-2020-13179 | MEDIUM | 5.5 | 0.3% | Aug 11, 2020 | Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 ar... |
| CVE-2020-15071 | MEDIUM | 6.1 | 0.7% | Aug 11, 2020 | content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading. |
| CVE-2020-13178 | MEDIUM | 6.7 | 0.2% | Aug 11, 2020 | A function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to version 20.04.1 does... |
| CVE-2020-13176 | MEDIUM | 6.1 | 0.8% | Aug 11, 2020 | The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to ... |
| CVE-2020-13174 | MEDIUM | 6.1 | 0.7% | Aug 11, 2020 | The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HT... |
| CVE-2020-15597 | MEDIUM | 5.4 | 0.5% | Aug 11, 2020 | SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment fi... |
| CVE-2020-14313 | MEDIUM | 4.3 | 0.9% | Aug 11, 2020 | An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker... |
| CVE-2020-10780 | MEDIUM | 6.3 | 0.7% | Aug 11, 2020 | Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as ... |
| CVE-2020-10779 | MEDIUM | 6.5 | 0.8% | Aug 11, 2020 | Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypas... |
| CVE-2020-10778 | MEDIUM | 6 | 0.9% | Aug 11, 2020 | In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled a... |
| CVE-2020-10777 | MEDIUM | 5.4 | 0.7% | Aug 11, 2020 | A cross-site scripting flaw was found in Report Menu feature of Red Hat CloudForms 4.7 and 5. An attacker could use this... |
| CVE-2020-4485 | MEDIUM | 6.5 | 1.5% | Aug 11, 2020 | IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an at... |
| CVE-2020-16278 | MEDIUM | 6.1 | 0.6% | Aug 10, 2020 | A cross-site scripting (XSS) vulnerability in the Permissions component in SAINT Security Suite 8.0 through 9.8.20 could... |
| CVE-2020-16275 | MEDIUM | 6.1 | 0.6% | Aug 10, 2020 | A cross-site scripting (XSS) vulnerability in the Credential Manager component in SAINT Security Suite 8.0 through 9.8.2... |
| CVE-2020-15139 | MEDIUM | 6.1 | 1.3% | Aug 10, 2020 | In MyBB before version 1.8.24, the custom MyCode (BBCode) for the visual editor doesn't escape input properly when rende... |
| CVE-2020-9245 | MEDIUM | 5.5 | 0.5% | Aug 10, 2020 | HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.... |
| CVE-2020-9243 | MEDIUM | 5.5 | 0.5% | Aug 10, 2020 | HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service vulnerability. The system doe... |
| CVE-2020-17480 | MEDIUM | 6.1 | 1.2% | Aug 10, 2020 | TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the core parser, the paste plugin, and the visualchars plugin by... |
| CVE-2020-15662 | MEDIUM | 6.5 | 0.7% | Aug 10, 2020 | A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now