2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0591 | MEDIUM | 6.7 | 0.3% | Nov 12, 2020 | Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en... |
| CVE-2020-0590 | HIGH | 7.8 | 0.4% | Nov 12, 2020 | Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially e... |
| CVE-2020-0588 | MEDIUM | 6.7 | 0.3% | Nov 12, 2020 | Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enabl... |
| CVE-2020-0587 | MEDIUM | 6.7 | 0.3% | Nov 12, 2020 | Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enabl... |
| CVE-2020-0584 | MEDIUM | 6.2 | 0.3% | Nov 12, 2020 | Buffer overflow in firmware for Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series m... |
| CVE-2020-0575 | MEDIUM | 5.5 | 0.3% | Nov 12, 2020 | Improper buffer restrictions in the Intel(R) Unite Client for Windows* before version 4.2.13064 may allow an authenticat... |
| CVE-2020-24443 | MEDIUM | 6.1 | 1.5% | Nov 12, 2020 | Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an atta... |
| CVE-2020-24442 | MEDIUM | 6.1 | 1.5% | Nov 12, 2020 | Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an atta... |
| CVE-2020-24441 | MEDIUM | 5.5 | 2.3% | Nov 12, 2020 | Adobe Acrobat Reader for Android version 20.6.2 (and earlier) does not properly restrict access to directories created b... |
| CVE-2020-9128 | MEDIUM | 4.4 | 0.1% | Nov 12, 2020 | FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with high permissions can ex... |
| CVE-2020-27481 | CRITICAL | 9.8 | 10.6% | Nov 12, 2020 | An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_no... |
| CVE-2020-25706 | MEDIUM | 6.1 | 2.8% | Nov 12, 2020 | A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of err... |
| CVE-2020-25658 | MEDIUM | 5.9 | 1.6% | Nov 12, 2020 | It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA d... |
| CVE-2020-13954 | MEDIUM | 6.1 | 43.0% | Nov 12, 2020 | By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This... |
| CVE-2020-7770 | CRITICAL | 9.8 | 1.9% | Nov 12, 2020 | This affects the package json8 before 1.0.3. The function adds in the target object the property specified in the path, ... |
| CVE-2020-7333 | MEDIUM | 4.8 | 0.5% | Nov 12, 2020 | Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 Novem... |
| CVE-2020-7332 | HIGH | 8.8 | 0.6% | Nov 12, 2020 | Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0... |
| CVE-2020-7331 | HIGH | 7.8 | 0.4% | Nov 12, 2020 | Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local use... |
| CVE-2020-3639 | CRITICAL | 9.8 | 0.9% | Nov 12, 2020 | u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cyc... |
| CVE-2020-3632 | HIGH | 7.8 | 0.2% | Nov 12, 2020 | u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snap... |
| CVE-2020-11209 | MEDIUM | 5.5 | 1.6% | Nov 12, 2020 | Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, ... |
| CVE-2020-11208 | HIGH | 7.8 | 1.7% | Nov 12, 2020 | Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as ... |
| CVE-2020-11207 | HIGH | 7.8 | 1.5% | Nov 12, 2020 | Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snap... |
| CVE-2020-11206 | HIGH | 7.8 | 1.8% | Nov 12, 2020 | Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in... |
| CVE-2020-11205 | HIGH | 7.8 | 0.2% | Nov 12, 2020 | u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now