2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9942 | MEDIUM | 4.3 | 1.2% | Dec 8, 2020 | An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Big Sur ... |
| CVE-2020-9922 | MEDIUM | 6.5 | 1.5% | Dec 8, 2020 | A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, Security Upda... |
| CVE-2020-9849 | MEDIUM | 6.5 | 2.1% | Dec 8, 2020 | An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.... |
| CVE-2020-28946 | HIGH | 7.5 | 1.2% | Dec 8, 2020 | An improper webserver configuration on Plum IK-401 devices with firmware before 1.02 allows an attacker (with network ac... |
| CVE-2020-27894 | MEDIUM | 5.5 | 0.7% | Dec 8, 2020 | The issue was addressed with additional user controls. This issue is fixed in macOS Big Sur 11.0.1. Users may be unable ... |
| CVE-2020-26233 | HIGH | 7.3 | 5.9% | Dec 8, 2020 | Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and mac... |
| CVE-2020-14207 | MEDIUM | 5.3 | 1.4% | Dec 8, 2020 | The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users ... |
| CVE-2020-14206 | MEDIUM | 6.1 | 0.9% | Dec 8, 2020 | The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary par... |
| CVE-2020-14205 | MEDIUM | 5.3 | 1.1% | Dec 8, 2020 | The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to per... |
| CVE-2020-10016 | HIGH | 7.8 | 1.3% | Dec 8, 2020 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS... |
| CVE-2020-10014 | MEDIUM | 6.3 | 1.1% | Dec 8, 2020 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m... |
| CVE-2020-10013 | HIGH | 7.8 | 1.3% | Dec 8, 2020 | A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.0, iOS 14.0 and iPadOS 14.0. ... |
| CVE-2020-10012 | MEDIUM | 6.1 | 1.0% | Dec 8, 2020 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.0.1. Processing... |
| CVE-2020-10011 | HIGH | 7.8 | 1.2% | Dec 8, 2020 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.2 and iPadOS 14.2, macO... |
| CVE-2020-10010 | HIGH | 7.8 | 0.4% | Dec 8, 2020 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and ... |
| CVE-2020-10009 | MEDIUM | 5.5 | 1.1% | Dec 8, 2020 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A sandboxed pro... |
| CVE-2020-10007 | MEDIUM | 5.5 | 0.4% | Dec 8, 2020 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A malicious app... |
| CVE-2020-10006 | MEDIUM | 5.5 | 0.9% | Dec 8, 2020 | This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.0.1. A malicious applicatio... |
| CVE-2020-10004 | HIGH | 7.8 | 1.1% | Dec 8, 2020 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iP... |
| CVE-2020-10003 | HIGH | 7.8 | 0.4% | Dec 8, 2020 | An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization... |
| CVE-2020-10002 | MEDIUM | 5.5 | 0.4% | Dec 8, 2020 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iO... |
| CVE-2020-29602 | CRITICAL | 9.8 | 2.2% | Dec 8, 2020 | The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for a root user. System us... |
| CVE-2020-29601 | CRITICAL | 9.8 | 2.3% | Dec 8, 2020 | The official notary docker images before signer-0.6.1-1 contain a blank password for a root user. System using the notar... |
| CVE-2020-29581 | CRITICAL | 9.8 | 2.2% | Dec 8, 2020 | The official spiped docker images before 1.5-alpine contain a blank password for a root user. Systems using the spiped d... |
| CVE-2020-29580 | CRITICAL | 9.8 | 2.3% | Dec 8, 2020 | The official storm Docker images before 1.2.1 contain a blank password for a root user. Systems using the Storm Docker c... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now