2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7647 | MEDIUM | 5.3 | 1.6% | May 11, 2020 | All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby ... |
| CVE-2020-5834 | MEDIUM | 5.3 | 1.7% | May 11, 2020 | Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow... |
| CVE-2020-12784 | MEDIUM | 5.3 | 1.3% | May 11, 2020 | cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings (SEC-505). |
| CVE-2020-12748 | MEDIUM | 5.3 | 0.3% | May 11, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protectio... |
| CVE-2020-11864 | MEDIUM | 5.5 | 1.2% | May 11, 2020 | libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2). |
| CVE-2020-11863 | MEDIUM | 5.5 | 1.1% | May 11, 2020 | libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2). |
| CVE-2020-1698 | MEDIUM | 5.5 | 0.4% | May 11, 2020 | A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password ... |
| CVE-2020-10685 | MEDIUM | 5.5 | 0.4% | May 11, 2020 | A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9... |
| CVE-2020-9314 | MEDIUM | 4.8 | 1.3% | May 10, 2020 | ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration c... |
| CVE-2020-12771 | MEDIUM | 5.5 | 0.5% | May 9, 2020 | An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadloc... |
| CVE-2020-12770 | MEDIUM | 6.7 | 0.6% | May 9, 2020 | An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failur... |
| CVE-2020-12769 | MEDIUM | 5.5 | 0.7% | May 9, 2020 | An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via co... |
| CVE-2020-12768 | MEDIUM | 5.5 | 0.4% | May 9, 2020 | An issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has a memory leak, aka CID-... |
| CVE-2020-12767 | MEDIUM | 5.5 | 0.5% | May 9, 2020 | exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error. |
| CVE-2020-12765 | MEDIUM | 5.3 | 1.3% | May 9, 2020 | Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal. |
| CVE-2020-12764 | MEDIUM | 5.3 | 1.3% | May 9, 2020 | Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal. |
| CVE-2020-6616 | MEDIUM | 6.5 | 0.7% | May 8, 2020 | Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (P... |
| CVE-2020-11006 | MEDIUM | 5.4 | 0.6% | May 8, 2020 | In Shopizer before version 2.11.0, a script can be injected in various forms and saved in the database, then executed wh... |
| CVE-2020-12737 | MEDIUM | 6.5 | 1.1% | May 8, 2020 | An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using d... |
| CVE-2020-10690 | MEDIUM | 6.4 | 0.4% | May 8, 2020 | There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cde... |
| CVE-2020-11541 | MEDIUM | 5.5 | 0.3% | May 8, 2020 | In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity (XXE) injection issue exists that would allow a local ... |
| CVE-2020-12680 | MEDIUM | 5.5 | 0.3% | May 8, 2020 | Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user credentials. The functions of the execut... |
| CVE-2020-12718 | MEDIUM | 5.4 | 0.7% | May 8, 2020 | In administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take advantage of a stored XSS vulne... |
| CVE-2020-11056 | MEDIUM | 6.3 | 1.0% | May 7, 2020 | In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields... |
| CVE-2020-11055 | MEDIUM | 5.4 | 0.8% | May 7, 2020 | In BookStack greater than or equal to 0.18.0 and less than 0.29.2, there is an XSS vulnerability in comment creation. A ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now