2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6414 | HIGH | 8.8 | 1.9% | Feb 11, 2020 | Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to byp... |
| CVE-2020-6413 | HIGH | 8.8 | 1.9% | Feb 11, 2020 | Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML va... |
| CVE-2020-6410 | HIGH | 8.8 | 1.7% | Feb 11, 2020 | Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confus... |
| CVE-2020-6409 | HIGH | 8.8 | 1.7% | Feb 11, 2020 | Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced t... |
| CVE-2020-6406 | HIGH | 8.8 | 1.8% | Feb 11, 2020 | Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap cor... |
| CVE-2020-6404 | HIGH | 8.8 | 2.0% | Feb 11, 2020 | Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially ex... |
| CVE-2020-6402 | HIGH | 8.8 | 2.7% | Feb 11, 2020 | Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who conv... |
| CVE-2020-6398 | HIGH | 8.8 | 1.8% | Feb 11, 2020 | Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially expl... |
| CVE-2020-6390 | HIGH | 8.8 | 3.1% | Feb 11, 2020 | Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially e... |
| CVE-2020-6389 | HIGH | 8.8 | 1.7% | Feb 11, 2020 | Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit he... |
| CVE-2020-6388 | HIGH | 8.8 | 2.0% | Feb 11, 2020 | Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit... |
| CVE-2020-6387 | HIGH | 8.8 | 1.8% | Feb 11, 2020 | Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit he... |
| CVE-2020-6385 | HIGH | 8.8 | 2.3% | Feb 11, 2020 | Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass si... |
| CVE-2020-6382 | HIGH | 8.8 | 2.3% | Feb 11, 2020 | Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit hea... |
| CVE-2020-6381 | HIGH | 8.8 | 2.2% | Feb 11, 2020 | Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker ... |
| CVE-2020-6380 | HIGH | 8.8 | 1.2% | Feb 11, 2020 | Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had ... |
| CVE-2020-6379 | HIGH | 8.8 | 1.1% | Feb 11, 2020 | Use after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2020-6378 | HIGH | 8.8 | 1.2% | Feb 11, 2020 | Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap c... |
| CVE-2020-8596 | HIGH | 7.5 | 1.6% | Feb 11, 2020 | participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-bas... |
| CVE-2020-7217 | HIGH | 7.5 | 1.6% | Feb 11, 2020 | An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause... |
| CVE-2020-5529 | HIGH | 8.1 | 4.6% | Feb 11, 2020 | HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a ... |
| CVE-2020-3935 | HIGH | 7.5 | 0.9% | Feb 11, 2020 | TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, stores users’ information by c... |
| CVE-2020-8841 | HIGH | 8.8 | 1.4% | Feb 10, 2020 | An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint i... |
| CVE-2020-8808 | HIGH | 7.8 | 0.6% | Feb 7, 2020 | The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged us... |
| CVE-2020-6768 | HIGH | 7.5 | 1.7% | Feb 7, 2020 | A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now