2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6491 | MEDIUM | 6.5 | 1.5% | May 21, 2020 | Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spo... |
| CVE-2020-6490 | MEDIUM | 4.3 | 1.5% | May 21, 2020 | Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been abl... |
| CVE-2020-6489 | MEDIUM | 4.3 | 1.6% | May 21, 2020 | Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had... |
| CVE-2020-6488 | MEDIUM | 4.3 | 1.5% | May 21, 2020 | Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass ... |
| CVE-2020-6487 | MEDIUM | 6.5 | 1.6% | May 21, 2020 | Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass ... |
| CVE-2020-6486 | MEDIUM | 6.5 | 1.7% | May 21, 2020 | Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypas... |
| CVE-2020-6485 | MEDIUM | 6.5 | 1.7% | May 21, 2020 | Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had co... |
| CVE-2020-6484 | MEDIUM | 6.5 | 1.5% | May 21, 2020 | Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass ... |
| CVE-2020-6483 | MEDIUM | 6.5 | 1.7% | May 21, 2020 | Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass n... |
| CVE-2020-6482 | MEDIUM | 6.5 | 1.3% | May 21, 2020 | Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convin... |
| CVE-2020-6481 | MEDIUM | 6.5 | 1.5% | May 21, 2020 | Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to pe... |
| CVE-2020-6480 | MEDIUM | 6.5 | 1.2% | May 21, 2020 | Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass ... |
| CVE-2020-6479 | MEDIUM | 6.5 | 1.6% | May 21, 2020 | Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof securi... |
| CVE-2020-6478 | MEDIUM | 6.5 | 1.6% | May 21, 2020 | Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof se... |
| CVE-2020-6476 | MEDIUM | 6.5 | 1.3% | May 21, 2020 | Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a ... |
| CVE-2020-6475 | MEDIUM | 6.5 | 1.7% | May 21, 2020 | Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof securi... |
| CVE-2020-6473 | MEDIUM | 6.5 | 1.8% | May 21, 2020 | Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain pote... |
| CVE-2020-6472 | MEDIUM | 6.5 | 1.5% | May 21, 2020 | Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convin... |
| CVE-2020-6470 | MEDIUM | 6.1 | 1.0% | May 21, 2020 | Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker ... |
| CVE-2020-6460 | MEDIUM | 6.5 | 0.9% | May 21, 2020 | Insufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to perf... |
| CVE-2020-11078 | MEDIUM | 6.8 | 2.6% | May 20, 2020 | In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could cha... |
| CVE-2020-13240 | MEDIUM | 5.4 | 0.7% | May 20, 2020 | The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded ... |
| CVE-2020-13239 | MEDIUM | 5.4 | 0.7% | May 20, 2020 | The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is ... |
| CVE-2020-5753 | MEDIUM | 5.3 | 1.1% | May 20, 2020 | Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's S... |
| CVE-2020-13231 | MEDIUM | 6.5 | 0.8% | May 20, 2020 | In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now