2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1106 | MEDIUM | 6.1 | 3.1% | May 21, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2020-1105 | MEDIUM | 5.4 | 1.6% | May 21, 2020 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ... |
| CVE-2020-1104 | MEDIUM | 5.4 | 1.6% | May 21, 2020 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ... |
| CVE-2020-1103 | MEDIUM | 6.5 | 2.7% | May 21, 2020 | An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server... |
| CVE-2020-1101 | MEDIUM | 5.4 | 1.6% | May 21, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2020-1100 | MEDIUM | 5.4 | 1.6% | May 21, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2020-1099 | MEDIUM | 5.4 | 1.6% | May 21, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2020-1096 | MEDIUM | 4.2 | 7.1% | May 21, 2020 | A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vu... |
| CVE-2020-1084 | MEDIUM | 5.5 | 1.1% | May 21, 2020 | A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain... |
| CVE-2020-1076 | MEDIUM | 5.5 | 1.0% | May 21, 2020 | A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully... |
| CVE-2020-1075 | MEDIUM | 5.5 | 1.5% | May 21, 2020 | An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory. An... |
| CVE-2020-1072 | MEDIUM | 5.5 | 1.3% | May 21, 2020 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker... |
| CVE-2020-1071 | MEDIUM | 6.8 | 0.9% | May 21, 2020 | An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialo... |
| CVE-2020-1065 | MEDIUM | 4.2 | 7.7% | May 21, 2020 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. ... |
| CVE-2020-1063 | MEDIUM | 5.4 | 1.4% | May 21, 2020 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a speci... |
| CVE-2020-1059 | MEDIUM | 4.3 | 2.0% | May 21, 2020 | A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content. An attacker who successfully e... |
| CVE-2020-1056 | MEDIUM | 5.4 | 3.3% | May 21, 2020 | An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whic... |
| CVE-2020-1055 | MEDIUM | 5.5 | 1.8% | May 21, 2020 | A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly san... |
| CVE-2020-1037 | MEDIUM | 4.2 | 7.7% | May 21, 2020 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi... |
| CVE-2020-0963 | MEDIUM | 5.5 | 5.5% | May 21, 2020 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m... |
| CVE-2020-13258 | MEDIUM | 6.1 | 2.5% | May 21, 2020 | Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.p... |
| CVE-2020-12431 | MEDIUM | 6.6 | 0.5% | May 21, 2020 | A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on t... |
| CVE-2020-9069 | MEDIUM | 6.5 | 0.3% | May 21, 2020 | There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could explo... |
| CVE-2020-9045 | MEDIUM | 6.5 | 1.0% | May 21, 2020 | During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System ... |
| CVE-2020-7655 | MEDIUM | 6.1 | 0.8% | May 21, 2020 | netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks mi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now