2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-8239CRITICAL9.8A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation att...
CVE-2020-6829MEDIUM5.3When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial i...
CVE-2020-5145HIGH8.6SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerabili...
CVE-2020-5144HIGH7.8SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SY...
CVE-2020-27957MEDIUM5.4The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certa...
CVE-2020-27956CRITICAL9.8An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the use...
CVE-2020-16140MEDIUM6.1The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS.
CVE-2020-9982MEDIUM5.5This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Apple Music 3.4.0 ...
CVE-2020-9979MEDIUM5.5A trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0. An att...
CVE-2020-9973HIGH7.8An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.7, Securi...
CVE-2020-9961HIGH7.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.7, Secur...
CVE-2020-9941HIGH7.5This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 H...
CVE-2020-9932HIGH8.8A memory corruption issue was addressed with improved validation. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPa...
CVE-2020-9866CRITICAL9.8A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6, Security U...
CVE-2020-9860MEDIUM5.4A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 13.0.5. P...
CVE-2020-9857MEDIUM4.3An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in...
CVE-2020-9786LOW3.3This issue was addressed with improved checks This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mo...
CVE-2020-9782HIGH7.5A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m...
CVE-2020-9774HIGH7.5An issue existed with Siri Suggestions access to encrypted data. The issue was fixed by limiting access to encrypted dat...
CVE-2020-3880HIGH7.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6.1.2, iOS 13.3.1 and...
CVE-2020-3864HIGH7.8A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for...
CVE-2020-3863HIGH7.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3, Se...
CVE-2020-3855HIGH7.1An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.3, Security...
CVE-2020-3852MEDIUM5.3A logic issue was addressed with improved validation. This issue is fixed in Safari 13.0.5. A URL scheme may be incorrec...
CVE-2020-3851HIGH7.8A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Sec...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now