2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6362 | MEDIUM | 6.5 | 1.0% | Oct 20, 2020 | SAP Banking Services version 500, use an incorrect authorization object in some of its reports. Although the affected re... |
| CVE-2020-6315 | MEDIUM | 5.5 | 0.8% | Oct 20, 2020 | SAP 3D Visual Enterprise Viewer, version 9, allows an attacker to send certain manipulated file to the victim, which can... |
| CVE-2020-6308 | MEDIUM | 5.3 | 61.7% | Oct 20, 2020 | SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated at... |
| CVE-2020-7749 | HIGH | 7.6 | 1.6% | Oct 20, 2020 | This affects all versions of package osm-static-maps. User input given to the package is passed directly to a template w... |
| CVE-2020-7748 | HIGH | 8.1 | 1.7% | Oct 20, 2020 | This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used a... |
| CVE-2020-7747 | MEDIUM | 6.3 | 0.9% | Oct 20, 2020 | This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a s... |
| CVE-2020-5640 | CRITICAL | 9.8 | 2.4% | Oct 20, 2020 | Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker to execut... |
| CVE-2020-15261 | MEDIUM | 6.7 | 11.1% | Oct 19, 2020 | On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally auth... |
| CVE-2020-15256 | CRITICAL | 9.8 | 1.5% | Oct 19, 2020 | A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerab... |
| CVE-2020-6085 | HIGH | 7.5 | 3.5% | Oct 19, 2020 | An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Br... |
| CVE-2020-6084 | HIGH | 7.5 | 3.5% | Oct 19, 2020 | An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Br... |
| CVE-2020-15263 | MEDIUM | 6.1 | 0.7% | Oct 19, 2020 | In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not e... |
| CVE-2020-15245 | MEDIUM | 4.3 | 0.6% | Oct 19, 2020 | In Sylius before versions 1.6.9, 1.7.9 and 1.8.3, the user may register in a shop by email mail@example.com, verify it, ... |
| CVE-2020-13937 | MEDIUM | 5.3 | 78.8% | Oct 19, 2020 | Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.... |
| CVE-2020-10746 | MEDIUM | 6.1 | 0.2% | Oct 19, 2020 | A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to c... |
| CVE-2020-9263 | HIGH | 7.8 | 0.8% | Oct 19, 2020 | HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11... |
| CVE-2020-9113 | HIGH | 8 | 0.4% | Oct 19, 2020 | HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module... |
| CVE-2020-9112 | HIGH | 7.8 | 0.2% | Oct 19, 2020 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a privilege elevation vulnerability. Due to lack of priv... |
| CVE-2020-9111 | MEDIUM | 4.5 | 0.3% | Oct 19, 2020 | E6878-370 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP21C233) and E6878-870 versions 10.0.3.1(H557SP27C233),10.0.3.1(... |
| CVE-2020-9092 | MEDIUM | 4.6 | 0.3% | Oct 19, 2020 | HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does no... |
| CVE-2020-24388 | HIGH | 7.5 | 1.7% | Oct 19, 2020 | An issue was discovered in the _send_secure_msg() function of yubihsm-shell through 2.0.2. The function does not validat... |
| CVE-2020-24387 | HIGH | 7.5 | 1.7% | Oct 19, 2020 | An issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2. The function does not explic... |
| CVE-2020-15262 | LOW | 3.7 | 0.5% | Oct 19, 2020 | In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash t... |
| CVE-2020-24375 | MEDIUM | 6.5 | 1.1% | Oct 19, 2020 | A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. |
| CVE-2020-15822 | HIGH | 7.3 | 1.4% | Oct 19, 2020 | In JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now