2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-1876HIGH7.5NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-boun...
CVE-2020-1873HIGH7.5NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an ou...
CVE-2020-1860HIGH7.5NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an ac...
CVE-2020-1844HIGH7.8PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in Huawei PCManager products. A...
CVE-2020-9463HIGH8.8Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server...
CVE-2020-5247HIGH7.5In Puma (RubyGem) before 4.3.2 and before 3.12.3, if an application using Puma allows untrusted input in a response head...
CVE-2020-9442HIGH7.8OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10,...
CVE-2020-9431HIGH7.5In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addr...
CVE-2020-9430HIGH7.5In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addres...
CVE-2020-9429HIGH7.5In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard...
CVE-2020-9428HIGH7.5In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in e...
CVE-2020-6418HIGH8.8Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corru...
CVE-2020-6407HIGH8.8Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially ...
CVE-2020-6386HIGH8.8Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap c...
CVE-2020-6384HIGH8.8Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap...
CVE-2020-6383HIGH8.8Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corru...
CVE-2020-7062HIGH7.5In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if u...
CVE-2020-3878HIGH7.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, mac...
CVE-2020-3877HIGH7.5An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3, watch...
CVE-2020-3871HIGH7.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3. An...
CVE-2020-3870HIGH7.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1,...
CVE-2020-3868HIGH8.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iP...
CVE-2020-3865HIGH8.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iP...
CVE-2020-3861HIGH7.1The issue was addressed with improved permissions logic. This issue is fixed in iTunes for Windows 12.10.4. A user may g...
CVE-2020-3860HIGH7.8A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13....

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now