2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26810 | HIGH | 7.5 | 1.1% | Nov 10, 2020 | SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to ... |
| CVE-2020-26809 | MEDIUM | 5.3 | 2.0% | Nov 10, 2020 | SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission c... |
| CVE-2020-26808 | HIGH | 7.2 | 3.0% | Nov 10, 2020 | SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 a... |
| CVE-2020-26807 | LOW | 3.3 | 0.3% | Nov 10, 2020 | SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its in... |
| CVE-2020-25074 | CRITICAL | 9.8 | 6.1% | Nov 10, 2020 | The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request... |
| CVE-2020-7766 | CRITICAL | 9.8 | 1.9% | Nov 10, 2020 | This affects all versions of package json-ptr. The issue occurs in the set operation (https://flitbit.github.io/json-ptr... |
| CVE-2020-28267 | HIGH | 7.5 | 2.2% | Nov 10, 2020 | Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and m... |
| CVE-2020-13927 | CRITICAL | 9.8 | 99.7% | Nov 10, 2020 | The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but th... |
| CVE-2020-12485 | MEDIUM | 5.5 | 0.3% | Nov 10, 2020 | The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which c... |
| CVE-2020-5388 | MEDIUM | 6.9 | 0.3% | Nov 10, 2020 | Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vul... |
| CVE-2020-4760 | MEDIUM | 5.4 | 0.9% | Nov 10, 2020 | IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja... |
| CVE-2020-4704 | MEDIUM | 5.4 | 0.9% | Nov 10, 2020 | IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2020-4568 | MEDIUM | 5.5 | 0.7% | Nov 10, 2020 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, and 4.0 stores user credentials in plain in clear text which can be read by... |
| CVE-2020-24384 | CRITICAL | 9.8 | 3.4% | Nov 10, 2020 | A10 Networks ACOS and aGalaxy management Graphical User Interfaces (GUIs) have an unauthenticated Remote Code Execution ... |
| CVE-2020-0454 | MEDIUM | 5.5 | 0.2% | Nov 10, 2020 | In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission... |
| CVE-2020-0453 | MEDIUM | 5.5 | 0.3% | Nov 10, 2020 | In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent.... |
| CVE-2020-0452 | CRITICAL | 9.8 | 3.2% | Nov 10, 2020 | In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could ... |
| CVE-2020-0451 | HIGH | 8.8 | 1.9% | Nov 10, 2020 | In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buf... |
| CVE-2020-0450 | MEDIUM | 6.5 | 0.8% | Nov 10, 2020 | In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to r... |
| CVE-2020-0449 | HIGH | 8.8 | 1.3% | Nov 10, 2020 | In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to... |
| CVE-2020-0448 | MEDIUM | 5.5 | 0.1% | Nov 10, 2020 | In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to... |
| CVE-2020-0447 | CRITICAL | 9.8 | 0.6% | Nov 10, 2020 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A... |
| CVE-2020-0446 | CRITICAL | 9.8 | 0.5% | Nov 10, 2020 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A... |
| CVE-2020-0445 | CRITICAL | 9.8 | 0.5% | Nov 10, 2020 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A... |
| CVE-2020-0443 | MEDIUM | 5.5 | 0.3% | Nov 10, 2020 | In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to loc... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now