2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0113 | MEDIUM | 5.5 | 0.4% | Jun 10, 2020 | In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This cou... |
| CVE-2020-7580 | MEDIUM | 6.7 | 0.4% | Jun 10, 2020 | A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All... |
| CVE-2020-10755 | MEDIUM | 6.5 | 1.2% | Jun 10, 2020 | An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-ci... |
| CVE-2020-13271 | MEDIUM | 6.1 | 1.5% | Jun 10, 2020 | A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all p... |
| CVE-2020-13269 | MEDIUM | 6.1 | 1.8% | Jun 10, 2020 | A Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code on the Static Site Edi... |
| CVE-2020-13268 | MEDIUM | 5.3 | 1.1% | Jun 10, 2020 | A specially crafted request could be used to confirm the existence of files hosted on object storage services, without d... |
| CVE-2020-13267 | MEDIUM | 6.1 | 1.8% | Jun 10, 2020 | A Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads on the Metrics Dashboard in Git... |
| CVE-2020-6270 | MEDIUM | 6.5 | 0.8% | Jun 10, 2020 | SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not per... |
| CVE-2020-6269 | MEDIUM | 6.5 | 0.8% | Jun 10, 2020 | Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access ... |
| CVE-2020-6266 | MEDIUM | 5.4 | 0.6% | Jun 10, 2020 | SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due t... |
| CVE-2020-6260 | MEDIUM | 5.3 | 0.8% | Jun 10, 2020 | SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed ... |
| CVE-2020-6246 | MEDIUM | 6.1 | 0.7% | Jun 10, 2020 | SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750, ... |
| CVE-2020-6239 | MEDIUM | 4.4 | 0.3% | Jun 10, 2020 | Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permission... |
| CVE-2020-8337 | MEDIUM | 6.7 | 0.4% | Jun 9, 2020 | An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app as... |
| CVE-2020-8336 | MEDIUM | 6.8 | 0.3% | Jun 9, 2020 | Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmwar... |
| CVE-2020-8334 | MEDIUM | 6.8 | 0.3% | Jun 9, 2020 | The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which... |
| CVE-2020-8323 | MEDIUM | 6.7 | 0.3% | Jun 9, 2020 | A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStatio... |
| CVE-2020-8322 | MEDIUM | 6.7 | 0.3% | Jun 9, 2020 | A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkSt... |
| CVE-2020-8321 | MEDIUM | 6.7 | 0.3% | Jun 9, 2020 | A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Not... |
| CVE-2020-8320 | MEDIUM | 6.8 | 0.3% | Jun 9, 2020 | An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. |
| CVE-2020-1348 | MEDIUM | 6.5 | 5.2% | Jun 9, 2020 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m... |
| CVE-2020-1343 | MEDIUM | 5.9 | 2.8% | Jun 9, 2020 | An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plai... |
| CVE-2020-1340 | MEDIUM | 5.4 | 1.6% | Jun 9, 2020 | A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka '... |
| CVE-2020-1331 | MEDIUM | 5.4 | 1.3% | Jun 9, 2020 | A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially craf... |
| CVE-2020-1329 | MEDIUM | 6.5 | 2.6% | Jun 9, 2020 | A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Mi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now