2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12028 | HIGH | 8.1 | 51.0% | Jul 20, 2020 | In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to int... |
| CVE-2020-8215 | HIGH | 8.8 | 2.3% | Jul 20, 2020 | A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitra... |
| CVE-2020-8205 | HIGH | 7.5 | 1.2% | Jul 20, 2020 | The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, w... |
| CVE-2020-12029 | HIGH | 7.8 | 45.0% | Jul 20, 2020 | All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, un... |
| CVE-2020-15009 | HIGH | 7.8 | 0.4% | Jul 20, 2020 | AsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe in ScreenPad2_Upgrade_Tool.msi V1.0.3 for ASUS PCs ... |
| CVE-2020-15842 | HIGH | 8.1 | 1.8% | Jul 20, 2020 | Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, ... |
| CVE-2020-15841 | HIGH | 8.8 | 1.5% | Jul 20, 2020 | Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, ... |
| CVE-2020-9257 | HIGH | 8.8 | 0.8% | Jul 17, 2020 | HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C... |
| CVE-2020-9254 | HIGH | 7.8 | 0.9% | Jul 17, 2020 | HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C... |
| CVE-2020-7818 | HIGH | 7.8 | 1.2% | Jul 17, 2020 | DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF fil... |
| CVE-2020-10605 | HIGH | 7.5 | 1.1% | Jul 17, 2020 | Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files. |
| CVE-2020-5758 | HIGH | 8.8 | 4.4% | Jul 17, 2020 | Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authe... |
| CVE-2020-5756 | HIGH | 8.8 | 2.5% | Jul 17, 2020 | Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab ... |
| CVE-2020-15110 | HIGH | 8.1 | 0.9% | Jul 17, 2020 | In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant ... |
| CVE-2020-15108 | HIGH | 7.1 | 1.2% | Jul 17, 2020 | In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1. |
| CVE-2020-0228 | HIGH | 7.5 | 0.4% | Jul 17, 2020 | There is an improper configuration of recorder related service. Product: AndroidVersions: Android SoCAndroid ID: A-15633... |
| CVE-2020-0227 | HIGH | 7.8 | 0.3% | Jul 17, 2020 | In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission c... |
| CVE-2020-0226 | HIGH | 7.8 | 0.3% | Jul 17, 2020 | In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lead... |
| CVE-2020-15816 | HIGH | 8.8 | 3.5% | Jul 17, 2020 | In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could p... |
| CVE-2020-0120 | HIGH | 7.8 | 0.2% | Jul 17, 2020 | In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overfl... |
| CVE-2020-1653 | HIGH | 7.5 | 1.6% | Jul 17, 2020 | On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine (RE) may cause mbuf leak which ... |
| CVE-2020-1650 | HIGH | 7.5 | 1.0% | Jul 17, 2020 | On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the ... |
| CVE-2020-1649 | HIGH | 7.5 | 1.1% | Jul 17, 2020 | When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configur... |
| CVE-2020-1648 | HIGH | 7.5 | 1.3% | Jul 17, 2020 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing proces... |
| CVE-2020-1646 | HIGH | 7.5 | 1.0% | Jul 17, 2020 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a r... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now