2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-14582HIGH8.2Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Registration). Supported versions...
CVE-2020-14580HIGH8.2Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications (comp...
CVE-2020-14571HIGH7.2Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). Supported vers...
CVE-2020-14570HIGH7.1Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). Supported vers...
CVE-2020-14569HIGH8.1Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: In...
CVE-2020-14565HIGH8.1Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: Security). Supported versi...
CVE-2020-14561HIGH7.3Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (compon...
CVE-2020-14543HIGH7.3Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (compon...
CVE-2020-14536HIGH7.4Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (comp...
CVE-2020-14535HIGH7.4Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). Sup...
CVE-2020-14534HIGH8.2Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). The supported...
CVE-2020-8203HIGH7.4Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
CVE-2020-15572HIGH7.5Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor ...
CVE-2020-14499HIGH7.5Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful exploitation of this v...
CVE-2020-1481HIGH8.8A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source cod...
CVE-2020-1469HIGH7.5A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input, aka 'Bond Denial ...
CVE-2020-1465HIGH7.8An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To...
CVE-2020-1463HIGH7.8An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka '...
CVE-2020-1461HIGH7.1An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary loc...
CVE-2020-1458HIGH7.8A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic lin...
CVE-2020-1449HIGH7.8A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source m...
CVE-2020-1448HIGH8.8A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo...
CVE-2020-1447HIGH8.8A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo...
CVE-2020-1446HIGH8.8A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo...
CVE-2020-1439HIGH8.8A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails ...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now