2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7809 | MEDIUM | 6.1 | 0.6% | May 15, 2020 | ALSong 3.46 and earlier version contain a Document Object Model (DOM) based cross-site scripting vulnerability caused by... |
| CVE-2020-3810 | MEDIUM | 5.5 | 1.3% | May 15, 2020 | Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service whe... |
| CVE-2020-10744 | MEDIUM | 5 | 0.3% | May 15, 2020 | An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running bec... |
| CVE-2020-12882 | MEDIUM | 5.4 | 1.2% | May 15, 2020 | Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a ... |
| CVE-2020-12068 | MEDIUM | 6.5 | 0.9% | May 14, 2020 | An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are... |
| CVE-2020-12046 | MEDIUM | 5.7 | 0.5% | May 14, 2020 | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware updat... |
| CVE-2020-12042 | MEDIUM | 6.5 | 0.5% | May 14, 2020 | Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware ... |
| CVE-2020-0220 | MEDIUM | 6.7 | 0.1% | May 14, 2020 | In crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. Th... |
| CVE-2020-0106 | MEDIUM | 5.5 | 0.1% | May 14, 2020 | In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version che... |
| CVE-2020-0104 | MEDIUM | 5.5 | 0.2% | May 14, 2020 | In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This... |
| CVE-2020-0101 | MEDIUM | 5.5 | 0.1% | May 14, 2020 | In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could... |
| CVE-2020-0100 | MEDIUM | 5.5 | 0.1% | May 14, 2020 | In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to l... |
| CVE-2020-0093 | MEDIUM | 5 | 0.3% | May 14, 2020 | In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This ... |
| CVE-2020-0092 | MEDIUM | 5 | 0.1% | May 14, 2020 | In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification cont... |
| CVE-2020-0091 | MEDIUM | 5.5 | 0.1% | May 14, 2020 | In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAnd... |
| CVE-2020-0090 | MEDIUM | 5.5 | 0.1% | May 14, 2020 | An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-14981304... |
| CVE-2020-0065 | MEDIUM | 5.5 | 0.1% | May 14, 2020 | An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAnd... |
| CVE-2020-0064 | MEDIUM | 5.5 | 0.1% | May 14, 2020 | An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-1498... |
| CVE-2020-12875 | MEDIUM | 6.3 | 0.6% | May 14, 2020 | Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain un... |
| CVE-2020-5408 | MEDIUM | 6.5 | 1.8% | May 14, 2020 | Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.... |
| CVE-2020-12677 | MEDIUM | 6.1 | 1.9% | May 14, 2020 | An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately s... |
| CVE-2020-1960 | MEDIUM | 4.7 | 0.9% | May 14, 2020 | A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 t... |
| CVE-2020-1941 | MEDIUM | 6.1 | 6.2% | May 14, 2020 | In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a q... |
| CVE-2020-4365 | MEDIUM | 4.3 | 1.4% | May 14, 2020 | IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted reques... |
| CVE-2020-4299 | MEDIUM | 4.3 | 1.0% | May 14, 2020 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user throug... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now