2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-8669MEDIUM6.5Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated us...
CVE-2020-27386HIGH8.8An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and e...
CVE-2020-27385HIGH8.1Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authenti...
CVE-2020-26805HIGH7.2In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetai...
CVE-2020-26804HIGH8.8In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users ...
CVE-2020-26803HIGH8.8In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered f...
CVE-2020-24525HIGH7.8Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potenti...
CVE-2020-24460MEDIUM5.5Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentiall...
CVE-2020-24456HIGH7.8Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentiall...
CVE-2020-24454HIGH7.5Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before versi...
CVE-2020-16273HIGH7.8In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced by...
CVE-2020-12353MEDIUM6.5Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to...
CVE-2020-12350HIGH7.8Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enab...
CVE-2020-12349MEDIUM6.5Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated us...
CVE-2020-12347HIGH8.8Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated us...
CVE-2020-12346HIGH7.8Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an au...
CVE-2020-12345HIGH7.8Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an aut...
CVE-2020-12337MEDIUM6.7Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escala...
CVE-2020-12336HIGH7.8Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potential...
CVE-2020-12335HIGH7.8Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may allo...
CVE-2020-12334HIGH7.8Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2 may allow an authentic...
CVE-2020-12333HIGH7.8Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an authenticate...
CVE-2020-12332HIGH7.8Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may allow an authenticated...
CVE-2020-12331HIGH7.8Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated user...
CVE-2020-12330HIGH7.8Improper permissions in the installer for the Intel(R) Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an a...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now