2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-14298 | HIGH | 8.8 | 0.3% | Jul 13, 2020 | The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrec... |
| CVE-2020-5766 | HIGH | 7.5 | 6.1% | Jul 13, 2020 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS Simple Hits Counter Plugin f... |
| CVE-2020-15689 | HIGH | 7.5 | 1.3% | Jul 13, 2020 | Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header th... |
| CVE-2020-11061 | HIGH | 7.4 | 1.2% | Jul 10, 2020 | In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client ... |
| CVE-2020-11081 | HIGH | 8.2 | 0.6% | Jul 10, 2020 | osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH ... |
| CVE-2020-6114 | HIGH | 7.2 | 1.7% | Jul 10, 2020 | An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS (Commi... |
| CVE-2020-8199 | HIGH | 7.8 | 0.4% | Jul 10, 2020 | Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalati... |
| CVE-2020-8197 | HIGH | 8.8 | 1.8% | Jul 10, 2020 | Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, ... |
| CVE-2020-8190 | HIGH | 7.5 | 1.2% | Jul 10, 2020 | Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.... |
| CVE-2020-8187 | HIGH | 7.5 | 1.9% | Jul 10, 2020 | Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticat... |
| CVE-2020-3974 | HIGH | 7.8 | 0.4% | Jul 10, 2020 | VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for... |
| CVE-2020-4305 | HIGH | 8.8 | 4.5% | Jul 9, 2020 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the sy... |
| CVE-2020-15093 | HIGH | 8.6 | 1.4% | Jul 9, 2020 | The tough library (Rust/crates.io) prior to version 0.7.1 does not properly verify the threshold of cryptographic signat... |
| CVE-2020-13994 | HIGH | 8.8 | 7.4% | Jul 9, 2020 | An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve code execution on the ser... |
| CVE-2020-13993 | HIGH | 7.5 | 2.1% | Jul 9, 2020 | An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A blind time-based SQL injection issue allows remote un... |
| CVE-2020-12426 | HIGH | 8.8 | 1.6% | Jul 9, 2020 | Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed ev... |
| CVE-2020-12423 | HIGH | 7.8 | 0.4% | Jul 9, 2020 | When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in... |
| CVE-2020-12422 | HIGH | 8.8 | 1.9% | Jul 9, 2020 | In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, r... |
| CVE-2020-12420 | HIGH | 8.8 | 1.9% | Jul 9, 2020 | When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to me... |
| CVE-2020-12419 | HIGH | 8.8 | 2.3% | Jul 9, 2020 | When processing callbacks that occurred during window flushing in the parent process, the associated window may die; cau... |
| CVE-2020-12417 | HIGH | 8.8 | 2.7% | Jul 9, 2020 | Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory... |
| CVE-2020-12416 | HIGH | 8.8 | 1.4% | Jul 9, 2020 | A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-... |
| CVE-2020-12411 | HIGH | 8.8 | 1.2% | Jul 9, 2020 | Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corru... |
| CVE-2020-12410 | HIGH | 8.8 | 1.5% | Jul 9, 2020 | Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evi... |
| CVE-2020-12409 | HIGH | 8.8 | 1.0% | Jul 9, 2020 | When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now