2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5752 | HIGH | 7.8 | 8.6% | May 21, 2020 | Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitra... |
| CVE-2020-1799 | HIGH | 7.5 | 0.4% | May 21, 2020 | E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vuln... |
| CVE-2020-6477 | HIGH | 7.8 | 0.2% | May 21, 2020 | Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to per... |
| CVE-2020-6474 | HIGH | 8.8 | 1.7% | May 21, 2020 | Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap cor... |
| CVE-2020-6468 | HIGH | 8.8 | 6.4% | May 21, 2020 | Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corrup... |
| CVE-2020-6467 | HIGH | 8.8 | 1.7% | May 21, 2020 | Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap co... |
| CVE-2020-6464 | HIGH | 8.8 | 1.9% | May 21, 2020 | Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap co... |
| CVE-2020-6463 | HIGH | 8.8 | 2.9% | May 21, 2020 | Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap co... |
| CVE-2020-6459 | HIGH | 8.8 | 1.1% | May 21, 2020 | Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap... |
| CVE-2020-6458 | HIGH | 8.8 | 1.3% | May 21, 2020 | Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially ... |
| CVE-2020-13252 | HIGH | 8.8 | 5.4% | May 21, 2020 | Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRD... |
| CVE-2020-12647 | HIGH | 8.8 | 0.4% | May 21, 2020 | Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit invalid code sequences... |
| CVE-2020-5365 | HIGH | 7.5 | 1.0% | May 20, 2020 | Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability. The pre-configured support account, re... |
| CVE-2020-5364 | HIGH | 7.5 | 1.0% | May 20, 2020 | Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability. The SNMPv2 services is enabled, by def... |
| CVE-2020-9484 | HIGH | 7 | 55.5% | May 20, 2020 | When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a)... |
| CVE-2020-13249 | HIGH | 8.8 | 2.2% | May 20, 2020 | libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet rece... |
| CVE-2020-13241 | HIGH | 7.8 | 0.5% | May 20, 2020 | Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not veri... |
| CVE-2020-13246 | HIGH | 7.5 | 2.0% | May 20, 2020 | An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a reposi... |
| CVE-2020-3956 | HIGH | 8.8 | 21.1% | May 20, 2020 | VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4... |
| CVE-2020-10725 | HIGH | 7.7 | 2.2% | May 20, 2020 | A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhos... |
| CVE-2020-9410 | HIGH | 8.8 | 5.1% | May 20, 2020 | The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for Act... |
| CVE-2020-5579 | HIGH | 7.2 | 1.2% | May 20, 2020 | SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to... |
| CVE-2020-12034 | HIGH | 8.2 | 1.3% | May 20, 2020 | Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterpris... |
| CVE-2020-7139 | HIGH | 8.1 | 0.9% | May 19, 2020 | Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be expl... |
| CVE-2020-7138 | HIGH | 8.8 | 1.8% | May 19, 2020 | Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now