2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-16126 | LOW | 3.3 | 0.5% | Nov 11, 2020 | An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, ... |
| CVE-2020-25268 | HIGH | 8.8 | 2.3% | Nov 10, 2020 | Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for ... |
| CVE-2020-25267 | MEDIUM | 5.4 | 0.5% | Nov 10, 2020 | An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4. |
| CVE-2020-28409 | MEDIUM | 5.4 | 0.5% | Nov 10, 2020 | The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as c... |
| CVE-2020-28408 | MEDIUM | 5.4 | 0.5% | Nov 10, 2020 | The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard. |
| CVE-2020-24367 | HIGH | 7.8 | 0.3% | Nov 10, 2020 | Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by mod... |
| CVE-2020-24063 | HIGH | 7.2 | 1.4% | Nov 10, 2020 | The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF. |
| CVE-2020-23968 | HIGH | 7.8 | 0.9% | Nov 10, 2020 | Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on Program... |
| CVE-2020-28368 | MEDIUM | 4.4 | 0.4% | Nov 10, 2020 | Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the gue... |
| CVE-2020-27165 | — | — | — | Nov 10, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-28050. Reason: This candidate is a reservation d... |
| CVE-2020-28055 | HIGH | 7.8 | 0.5% | Nov 10, 2020 | A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TC... |
| CVE-2020-27403 | MEDIUM | 6.5 | 2.7% | Nov 10, 2020 | A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TC... |
| CVE-2020-27146 | HIGH | 8.8 | 0.3% | Nov 10, 2020 | The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretical... |
| CVE-2020-6316 | MEDIUM | 4.3 | 0.8% | Nov 10, 2020 | SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in... |
| CVE-2020-26824 | CRITICAL | 10 | 1.3% | Nov 10, 2020 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o... |
| CVE-2020-26823 | CRITICAL | 10 | 1.3% | Nov 10, 2020 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o... |
| CVE-2020-26822 | CRITICAL | 10 | 1.3% | Nov 10, 2020 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o... |
| CVE-2020-26821 | CRITICAL | 10 | 1.3% | Nov 10, 2020 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o... |
| CVE-2020-26820 | HIGH | 7.2 | 3.9% | Nov 10, 2020 | SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administra... |
| CVE-2020-26819 | HIGH | 8.8 | 0.9% | Nov 10, 2020 | SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user... |
| CVE-2020-26818 | HIGH | 8.8 | 1.1% | Nov 10, 2020 | SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user... |
| CVE-2020-26817 | HIGH | 7.8 | 1.2% | Nov 10, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sourc... |
| CVE-2020-26815 | HIGH | 8.6 | 1.4% | Nov 10, 2020 | SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send... |
| CVE-2020-26814 | MEDIUM | 4.9 | 0.9% | Nov 10, 2020 | SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys u... |
| CVE-2020-26811 | MEDIUM | 5.3 | 1.8% | Nov 10, 2020 | SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now