2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4089 | MEDIUM | 6.5 | 1.2% | Jun 26, 2020 | HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vuln... |
| CVE-2020-9584 | MEDIUM | 5.4 | 1.2% | Jun 26, 2020 | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a ... |
| CVE-2020-9581 | MEDIUM | 6.1 | 1.5% | Jun 26, 2020 | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a ... |
| CVE-2020-9577 | MEDIUM | 6.1 | 1.5% | Jun 26, 2020 | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a ... |
| CVE-2020-9557 | MEDIUM | 5.5 | 2.6% | Jun 26, 2020 | Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could... |
| CVE-2020-3809 | MEDIUM | 5.5 | 2.3% | Jun 26, 2020 | Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could ... |
| CVE-2020-3798 | MEDIUM | 6.5 | 4.7% | Jun 26, 2020 | Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration (host or local network) vulnerability. S... |
| CVE-2020-3796 | MEDIUM | 6.5 | 4.3% | Jun 26, 2020 | ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful explo... |
| CVE-2020-3767 | MEDIUM | 6.5 | 3.5% | Jun 26, 2020 | ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an insufficient input validation vulnerability. Successful... |
| CVE-2020-9629 | MEDIUM | 5.5 | 2.8% | Jun 26, 2020 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful e... |
| CVE-2020-9624 | MEDIUM | 5.5 | 2.8% | Jun 26, 2020 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful e... |
| CVE-2020-9622 | MEDIUM | 5.5 | 2.8% | Jun 26, 2020 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful e... |
| CVE-2020-9617 | MEDIUM | 5.5 | 2.8% | Jun 26, 2020 | Adobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could l... |
| CVE-2020-9616 | MEDIUM | 5.5 | 2.7% | Jun 26, 2020 | Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lea... |
| CVE-2020-14955 | MEDIUM | 5.5 | 0.4% | Jun 26, 2020 | In Jiangmin Antivirus 16.0.13.129, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or ... |
| CVE-2020-14477 | MEDIUM | 4.4 | 0.3% | Jun 26, 2020 | In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti ... |
| CVE-2020-10769 | MEDIUM | 5.5 | 0.5% | Jun 26, 2020 | A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in ... |
| CVE-2020-10727 | MEDIUM | 5.5 | 0.7% | Jun 26, 2020 | A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently store... |
| CVE-2020-10753 | MEDIUM | 6.5 | 1.6% | Jun 26, 2020 | A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injectio... |
| CVE-2020-4565 | MEDIUM | 5.9 | 1.2% | Jun 26, 2020 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an attacker to obtain sensitive information due to insecure ... |
| CVE-2020-4223 | MEDIUM | 5.4 | 0.6% | Jun 26, 2020 | IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users ... |
| CVE-2020-15017 | MEDIUM | 6.1 | 0.6% | Jun 26, 2020 | NeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly validates user input. ... |
| CVE-2020-15016 | MEDIUM | 6.1 | 0.6% | Jun 26, 2020 | NeDi 1.9C is vulnerable to reflected cross-site scripting. The Other-Converter.php file improperly validates user input.... |
| CVE-2020-15306 | MEDIUM | 5.5 | 0.5% | Jun 26, 2020 | An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in ge... |
| CVE-2020-15305 | MEDIUM | 5.5 | 0.4% | Jun 26, 2020 | An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::De... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now