2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8903 | HIGH | 7.8 | 0.3% | Jun 22, 2020 | A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is on... |
| CVE-2020-14461 | HIGH | 8.6 | 9.5% | Jun 22, 2020 | Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI. |
| CVE-2020-14204 | HIGH | 8.2 | 1.9% | Jun 22, 2020 | In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local f... |
| CVE-2020-14203 | HIGH | 8.8 | 0.5% | Jun 22, 2020 | WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users ... |
| CVE-2020-14969 | HIGH | 7.5 | 1.3% | Jun 22, 2020 | app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the att... |
| CVE-2020-14966 | HIGH | 7.5 | 1.1% | Jun 22, 2020 | An issue was discovered in the jsrsasign package through 8.0.18 for Node.js. It allows a malleability in ECDSA signature... |
| CVE-2020-8102 | HIGH | 8.8 | 1.1% | Jun 22, 2020 | Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an ex... |
| CVE-2020-3676 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapdr... |
| CVE-2020-3665 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firm... |
| CVE-2020-3642 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL a... |
| CVE-2020-3635 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto, Snap... |
| CVE-2020-3626 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto, Sna... |
| CVE-2020-3613 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon ... |
| CVE-2020-14960 | HIGH | 7.2 | 1.7% | Jun 22, 2020 | A SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments.php via the ctype param... |
| CVE-2020-14950 | HIGH | 8.8 | 2.6% | Jun 21, 2020 | aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modi... |
| CVE-2020-14933 | HIGH | 8.8 | 1.4% | Jun 20, 2020 | compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST requ... |
| CVE-2020-13263 | HIGH | 8.8 | 1.0% | Jun 19, 2020 | An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13... |
| CVE-2020-13275 | HIGH | 8.1 | 1.0% | Jun 19, 2020 | A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later ... |
| CVE-2020-13274 | HIGH | 7.5 | 1.1% | Jun 19, 2020 | A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts ... |
| CVE-2020-13273 | HIGH | 7.5 | 1.2% | Jun 19, 2020 | A Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0 and later through 13.0.1 |
| CVE-2020-13272 | HIGH | 8.8 | 0.6% | Jun 19, 2020 | OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authoriza... |
| CVE-2020-14930 | HIGH | 8.1 | 3.4% | Jun 19, 2020 | An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-res... |
| CVE-2020-14929 | HIGH | 7.5 | 1.8% | Jun 19, 2020 | Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involvi... |
| CVE-2020-8184 | HIGH | 7.5 | 2.9% | Jun 19, 2020 | A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 tha... |
| CVE-2020-8164 | HIGH | 7.5 | 4.2% | Jun 19, 2020 | A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now