2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1419 | MEDIUM | 5.5 | 1.3% | Jul 14, 2020 | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, ak... |
| CVE-2020-1398 | MEDIUM | 6.8 | 1.2% | Jul 14, 2020 | An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An... |
| CVE-2020-1397 | MEDIUM | 6.5 | 6.4% | Jul 14, 2020 | An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle ob... |
| CVE-2020-1391 | MEDIUM | 5.5 | 1.2% | Jul 14, 2020 | An information disclosure vulnerability exists when the Windows Agent Activation Runtime (AarSvc) fails to properly hand... |
| CVE-2020-1389 | MEDIUM | 5.5 | 1.2% | Jul 14, 2020 | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, ak... |
| CVE-2020-1386 | MEDIUM | 5.5 | 1.2% | Jul 14, 2020 | An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses f... |
| CVE-2020-1367 | MEDIUM | 5.5 | 1.2% | Jul 14, 2020 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window... |
| CVE-2020-1361 | MEDIUM | 5.5 | 1.2% | Jul 14, 2020 | An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerabi... |
| CVE-2020-1358 | MEDIUM | 5.5 | 1.2% | Jul 14, 2020 | An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To e... |
| CVE-2020-1351 | MEDIUM | 5.5 | 1.4% | Jul 14, 2020 | An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory,... |
| CVE-2020-1342 | MEDIUM | 5.5 | 6.4% | Jul 14, 2020 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninit... |
| CVE-2020-1333 | MEDIUM | 6.7 | 0.9% | Jul 14, 2020 | An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse po... |
| CVE-2020-1330 | MEDIUM | 5.5 | 1.2% | Jul 14, 2020 | An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handle... |
| CVE-2020-1326 | MEDIUM | 5.4 | 1.6% | Jul 14, 2020 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided inpu... |
| CVE-2020-1267 | MEDIUM | 4.9 | 4.5% | Jul 14, 2020 | This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when ... |
| CVE-2020-15104 | MEDIUM | 5.4 | 0.3% | Jul 14, 2020 | In Envoy before versions 1.12.6, 1.13.4, 1.14.4, and 1.15.0 when validating TLS certificates, Envoy would incorrectly al... |
| CVE-2020-11084 | MEDIUM | 5.4 | 1.4% | Jul 14, 2020 | In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manuall... |
| CVE-2020-5246 | MEDIUM | 6.5 | 0.9% | Jul 14, 2020 | Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being us... |
| CVE-2020-11083 | MEDIUM | 4.8 | 1.1% | Jul 14, 2020 | In October from version 1.0.319 and before version 1.0.466, a user with access to a markdown FormWidget that stores data... |
| CVE-2020-15721 | MEDIUM | 6.1 | 1.5% | Jul 14, 2020 | RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.p... |
| CVE-2020-7592 | MEDIUM | 6.5 | 0.3% | Jul 14, 2020 | A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All versions), S... |
| CVE-2020-7588 | MEDIUM | 5.3 | 2.2% | Jul 14, 2020 | A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation ... |
| CVE-2020-7581 | MEDIUM | 6.7 | 0.4% | Jul 14, 2020 | A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation ... |
| CVE-2020-7576 | MEDIUM | 5.4 | 0.6% | Jul 14, 2020 | A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions... |
| CVE-2020-15720 | MEDIUM | 6.8 | 1.0% | Jul 14, 2020 | In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation. ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now