2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8749 | HIGH | 8.8 | 1.1% | Nov 12, 2020 | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may al... |
| CVE-2020-8747 | CRITICAL | 9.1 | 1.7% | Nov 12, 2020 | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may al... |
| CVE-2020-8746 | MEDIUM | 6.5 | 0.9% | Nov 12, 2020 | Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allo... |
| CVE-2020-8745 | MEDIUM | 6.8 | 0.4% | Nov 12, 2020 | Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70... |
| CVE-2020-8744 | HIGH | 7.8 | 0.4% | Nov 12, 2020 | Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, I... |
| CVE-2020-8740 | MEDIUM | 6.7 | 0.4% | Nov 12, 2020 | Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to poten... |
| CVE-2020-8739 | HIGH | 7.8 | 0.4% | Nov 12, 2020 | Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authe... |
| CVE-2020-8738 | MEDIUM | 6.7 | 0.3% | Nov 12, 2020 | Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged ... |
| CVE-2020-8737 | MEDIUM | 6.8 | 0.4% | Nov 12, 2020 | Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro... |
| CVE-2020-8705 | MEDIUM | 6.8 | 0.5% | Nov 12, 2020 | Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 1... |
| CVE-2020-8698 | MEDIUM | 5.5 | 0.5% | Nov 12, 2020 | Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable... |
| CVE-2020-8696 | MEDIUM | 5.5 | 0.4% | Nov 12, 2020 | Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authentica... |
| CVE-2020-8695 | MEDIUM | 5.5 | 0.4% | Nov 12, 2020 | Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially ena... |
| CVE-2020-8694 | MEDIUM | 5.5 | 0.4% | Nov 12, 2020 | Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to p... |
| CVE-2020-8693 | MEDIUM | 6.7 | 0.3% | Nov 12, 2020 | Improper buffer restrictions in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user... |
| CVE-2020-8692 | MEDIUM | 6.7 | 0.3% | Nov 12, 2020 | Insufficient access control in the firmware of the Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow... |
| CVE-2020-8691 | MEDIUM | 6.7 | 0.4% | Nov 12, 2020 | A logic issue in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially... |
| CVE-2020-8690 | MEDIUM | 6.7 | 0.3% | Nov 12, 2020 | Protection mechanism failure in Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user ... |
| CVE-2020-8677 | MEDIUM | 4.4 | 0.3% | Nov 12, 2020 | Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to poten... |
| CVE-2020-8676 | MEDIUM | 6.7 | 0.3% | Nov 12, 2020 | Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to poten... |
| CVE-2020-7472 | CRITICAL | 9.8 | 3.1% | Nov 12, 2020 | An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8... |
| CVE-2020-28271 | CRITICAL | 9.8 | 3.3% | Nov 12, 2020 | Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service... |
| CVE-2020-28270 | CRITICAL | 9.8 | 3.7% | Nov 12, 2020 | Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a ... |
| CVE-2020-28269 | CRITICAL | 9.8 | 4.0% | Nov 12, 2020 | Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service a... |
| CVE-2020-28247 | MEDIUM | 5.3 | 1.5% | Nov 12, 2020 | The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.r... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now