2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11882 | MEDIUM | 6.1 | 1.0% | Jul 7, 2020 | The O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to other applications. Th... |
| CVE-2020-15037 | MEDIUM | 5.4 | 0.5% | Jul 7, 2020 | NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja... |
| CVE-2020-15036 | MEDIUM | 5.4 | 0.5% | Jul 7, 2020 | NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja... |
| CVE-2020-15584 | MEDIUM | 5.5 | 0.3% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can trigger an out-of-bounds access a... |
| CVE-2020-15583 | MEDIUM | 5.5 | 0.2% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. StickerProvider allows dire... |
| CVE-2020-15582 | MEDIUM | 5.5 | 0.3% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 7885 chipsets) software. The Bluetooth... |
| CVE-2020-15581 | MEDIUM | 5.3 | 0.3% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The kernel logging feature ... |
| CVE-2020-15580 | MEDIUM | 5.5 | 0.1% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factor... |
| CVE-2020-15578 | MEDIUM | 5.5 | 0.1% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with O(8.x) software. FactoryCamera does not properly restrict runtime... |
| CVE-2020-15577 | MEDIUM | 5.5 | 0.1% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Cameralyzer allows attackers to writ... |
| CVE-2020-15575 | MEDIUM | 6.1 | 1.5% | Jul 7, 2020 | SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194. |
| CVE-2020-15573 | MEDIUM | 6.1 | 1.5% | Jul 7, 2020 | SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421. |
| CVE-2020-15525 | MEDIUM | 5.3 | 1.1% | Jul 7, 2020 | GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint. |
| CVE-2020-15517 | MEDIUM | 5.4 | 0.6% | Jul 7, 2020 | The ke_search (aka Faceted Search) extension through 2.8.2, and 3.x through 3.1.3, for TYPO3 allows XSS. |
| CVE-2020-15516 | MEDIUM | 5.4 | 0.4% | Jul 7, 2020 | The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF. |
| CVE-2020-15514 | MEDIUM | 5.4 | 0.6% | Jul 7, 2020 | The jh_captcha extension through 2.1.3, and 3.x through 3.0.2, for TYPO3 allows XSS. |
| CVE-2020-15513 | MEDIUM | 5.3 | 0.8% | Jul 7, 2020 | The typo3_forum extension before 1.2.1 for TYPO3 has Incorrect Access Control. |
| CVE-2020-15509 | MEDIUM | 6.5 | 0.5% | Jul 7, 2020 | Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android (as used by nRF Connec... |
| CVE-2020-15392 | MEDIUM | 5.3 | 1.2% | Jul 7, 2020 | A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recove... |
| CVE-2020-10730 | MEDIUM | 6.5 | 2.4% | Jul 7, 2020 | A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17... |
| CVE-2020-15566 | MEDIUM | 6.5 | 0.4% | Jul 7, 2020 | An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect err... |
| CVE-2020-15564 | MEDIUM | 6.5 | 0.4% | Jul 7, 2020 | An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a miss... |
| CVE-2020-15563 | MEDIUM | 6.5 | 0.4% | Jul 7, 2020 | An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted ... |
| CVE-2020-15096 | MEDIUM | 6.8 | 0.8% | Jul 7, 2020 | In Electron before versions 6.1.1, 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass, meaning that cod... |
| CVE-2020-9226 | MEDIUM | 5.5 | 0.4% | Jul 6, 2020 | HUAWEI P30 with versions earlier than 10.1.0.135(C00E135R2P11) have an improper signature verification vulnerability. Th... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now