2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-13778HIGH8.8rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to li...
CVE-2020-7745HIGH7.1This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functional...
CVE-2020-13893MEDIUM5.4Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to in...
CVE-2020-27197CRITICAL9.8TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an ini...
CVE-2020-1243HIGH7.8<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific ...
CVE-2020-1167HIGH7.8<p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. ...
CVE-2020-1080HIGH8.8<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects...
CVE-2020-1047HIGH7.8<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects...
CVE-2020-17023HIGH7.8<p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'p...
CVE-2020-17022HIGH7.8<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memo...
CVE-2020-17003HIGH7.8<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An at...
CVE-2020-16995HIGH7.8<p>An elevation of privilege vulnerability exists in Network Watcher Agent virtual machine extension for Linux. An attac...
CVE-2020-16980HIGH7.8<p>An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operatio...
CVE-2020-16978MEDIUM5.4<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp...
CVE-2020-16977HIGH7<p>A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook...
CVE-2020-16976HIGH7.8<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p...
CVE-2020-16975HIGH7.8<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p...
CVE-2020-16974HIGH7.8<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p...
CVE-2020-16973HIGH7.8<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p...
CVE-2020-16972HIGH7.8<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p...
CVE-2020-16969HIGH7.1<p>An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messa...
CVE-2020-16968HIGH7.8<p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory....
CVE-2020-16967HIGH7.8<p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory....
CVE-2020-16957HIGH7.8<p>A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ...
CVE-2020-16956MEDIUM5.4<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now