2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15270 | MEDIUM | 4.3 | 1.2% | Oct 22, 2020 | Parse Server (npm package parse-server) broadcasts events to all clients without checking if the session token is valid.... |
| CVE-2020-3996 | MEDIUM | 5.5 | 0.3% | Oct 22, 2020 | Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in infor... |
| CVE-2020-27675 | MEDIUM | 4.7 | 0.3% | Oct 22, 2020 | An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. drivers/xen/events/events_ba... |
| CVE-2020-27674 | MEDIUM | 5.3 | 0.4% | Oct 22, 2020 | An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying ke... |
| CVE-2020-27673 | MEDIUM | 5.5 | 0.4% | Oct 22, 2020 | An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a d... |
| CVE-2020-27672 | HIGH | 7 | 0.3% | Oct 22, 2020 | An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve ... |
| CVE-2020-27671 | HIGH | 7.8 | 0.3% | Oct 22, 2020 | An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data... |
| CVE-2020-27670 | HIGH | 7.8 | 0.3% | Oct 22, 2020 | An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption)... |
| CVE-2020-25186 | HIGH | 7.5 | 1.1% | Oct 22, 2020 | An XXE vulnerability exists within LeviStudioU Release Build 2019-09-21 and prior when processing parameter entities, wh... |
| CVE-2020-18129 | HIGH | 8.8 | 0.6% | Oct 22, 2020 | A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php. |
| CVE-2020-15684 | CRITICAL | 9.8 | 1.3% | Oct 22, 2020 | Mozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed evidence of memory corru... |
| CVE-2020-15683 | CRITICAL | 9.8 | 2.6% | Oct 22, 2020 | Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of... |
| CVE-2020-15682 | MEDIUM | 6.5 | 0.5% | Oct 22, 2020 | When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application... |
| CVE-2020-15681 | HIGH | 7.5 | 1.1% | Oct 22, 2020 | When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could ha... |
| CVE-2020-15680 | MEDIUM | 5.3 | 0.9% | Oct 22, 2020 | If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguis... |
| CVE-2020-13327 | HIGH | 7.5 | 0.7% | Oct 22, 2020 | An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions st... |
| CVE-2020-11853 | HIGH | 8.8 | 77.0% | Oct 22, 2020 | Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting v... |
| CVE-2020-10721 | HIGH | 7.8 | 0.6% | Oct 22, 2020 | A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configurati... |
| CVE-2020-9997 | MEDIUM | 5.5 | 0.8% | Oct 22, 2020 | An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.1... |
| CVE-2020-9994 | HIGH | 7.1 | 0.9% | Oct 22, 2020 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Cat... |
| CVE-2020-9990 | HIGH | 7.8 | 0.2% | Oct 22, 2020 | A race condition was addressed with additional validation. This issue is fixed in macOS Catalina 10.15.6. A malicious ap... |
| CVE-2020-9986 | LOW | 3.3 | 0.9% | Oct 22, 2020 | A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This i... |
| CVE-2020-9985 | HIGH | 7.8 | 1.4% | Oct 22, 2020 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, ma... |
| CVE-2020-9984 | HIGH | 7.8 | 1.3% | Oct 22, 2020 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, mac... |
| CVE-2020-9980 | HIGH | 7.8 | 1.1% | Oct 22, 2020 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now