2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13649 | HIGH | 7.5 | 2.1% | May 28, 2020 | parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated b... |
| CVE-2020-11950 | HIGH | 8.8 | 2.7% | May 28, 2020 | VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user... |
| CVE-2020-13643 | HIGH | 8.8 | 0.8% | May 28, 2020 | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did ... |
| CVE-2020-13642 | HIGH | 8.8 | 0.8% | May 28, 2020 | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content f... |
| CVE-2020-13641 | HIGH | 8.8 | 0.8% | May 28, 2020 | An issue was discovered in the Real-Time Find and Replace plugin before 4.0.2 for WordPress. The far_options_page functi... |
| CVE-2020-8605 | HIGH | 8.8 | 87.6% | May 27, 2020 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitr... |
| CVE-2020-8604 | HIGH | 7.5 | 89.7% | May 27, 2020 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensi... |
| CVE-2020-11059 | HIGH | 7.5 | 1.1% | May 27, 2020 | In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from envi... |
| CVE-2020-10936 | HIGH | 7.8 | 0.5% | May 27, 2020 | Sympa before 6.2.56 allows privilege escalation. |
| CVE-2020-6774 | HIGH | 8.8 | 0.3% | May 27, 2020 | Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attack... |
| CVE-2020-13630 | HIGH | 7 | 1.0% | May 27, 2020 | ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. |
| CVE-2020-4379 | HIGH | 7.5 | 0.8% | May 27, 2020 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attack... |
| CVE-2020-4350 | HIGH | 7.5 | 0.8% | May 27, 2020 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attack... |
| CVE-2020-4349 | HIGH | 7.5 | 0.8% | May 27, 2020 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attack... |
| CVE-2020-4226 | HIGH | 7.5 | 1.3% | May 27, 2020 | IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters. This may lead to info... |
| CVE-2020-13386 | HIGH | 7.3 | 0.3% | May 27, 2020 | In SmartDraw 2020 27.0.0.0, the installer gives inherited write permissions to the Authenticated Users group on the Smar... |
| CVE-2020-13623 | HIGH | 7.5 | 1.2% | May 27, 2020 | JerryScript 2.2.0 allows attackers to cause a denial of service (stack consumption) via a proxy operation. |
| CVE-2020-13622 | HIGH | 7.5 | 1.3% | May 27, 2020 | JerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a property key query for a P... |
| CVE-2020-9046 | HIGH | 7.8 | 0.3% | May 26, 2020 | A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user ... |
| CVE-2020-6830 | HIGH | 7.5 | 0.9% | May 26, 2020 | For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridgin... |
| CVE-2020-12391 | HIGH | 7.5 | 1.4% | May 26, 2020 | Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed t... |
| CVE-2020-12387 | HIGH | 8.1 | 1.4% | May 26, 2020 | A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a pot... |
| CVE-2020-12393 | HIGH | 7.8 | 1.0% | May 26, 2020 | The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be c... |
| CVE-2020-8168 | HIGH | 8.8 | 0.7% | May 26, 2020 | We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilitie... |
| CVE-2020-3811 | HIGH | 7.5 | 1.8% | May 26, 2020 | qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now