2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11641 | MEDIUM | 6.5 | 1.2% | Oct 15, 2020 | A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensi... |
| CVE-2020-7744 | MEDIUM | 4.7 | 0.8% | Oct 15, 2020 | This affects all versions of package com.mintegral.msdk:alphab. The Android SDK distributed by the company contains mali... |
| CVE-2020-4499 | CRITICAL | 9.8 | 1.2% | Oct 15, 2020 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client ... |
| CVE-2020-7327 | MEDIUM | 6.7 | 0.3% | Oct 15, 2020 | Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to 3.2.0 ma... |
| CVE-2020-7326 | MEDIUM | 6.7 | 0.4% | Oct 15, 2020 | Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to e... |
| CVE-2020-7334 | HIGH | 8.2 | 0.3% | Oct 15, 2020 | Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2... |
| CVE-2020-27157 | HIGH | 8.1 | 1.0% | Oct 15, 2020 | Veritas APTARE versions prior to 10.5 included code that bypassed the normal login process when specific authentication ... |
| CVE-2020-27156 | CRITICAL | 9.8 | 2.1% | Oct 15, 2020 | Veritas APTARE versions prior to 10.5 did not perform adequate authorization checks. This vulnerability could allow for ... |
| CVE-2020-6365 | MEDIUM | 6.1 | 1.1% | Oct 15, 2020 | SAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an unauthenticated remote ... |
| CVE-2020-5642 | HIGH | 8.8 | 0.8% | Oct 15, 2020 | Cross-site request forgery (CSRF) vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote atta... |
| CVE-2020-27153 | HIGH | 8.6 | 4.1% | Oct 15, 2020 | In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attack... |
| CVE-2020-6376 | MEDIUM | 5.5 | 0.7% | Oct 15, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Hemisphere Binary (.rh) file recei... |
| CVE-2020-6375 | MEDIUM | 5.5 | 0.7% | Oct 15, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile (.cgm) ... |
| CVE-2020-6374 | HIGH | 7.8 | 1.2% | Oct 15, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation(.jt) file received ... |
| CVE-2020-6373 | HIGH | 7.8 | 1.2% | Oct 15, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources... |
| CVE-2020-6372 | HIGH | 7.8 | 1.2% | Oct 15, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources... |
| CVE-2020-6371 | MEDIUM | 4.3 | 0.9% | Oct 15, 2020 | User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be expo... |
| CVE-2020-6368 | MEDIUM | 5.4 | 0.6% | Oct 15, 2020 | SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an att... |
| CVE-2020-6364 | CRITICAL | 10 | 6.4% | Oct 15, 2020 | SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an att... |
| CVE-2020-6363 | MEDIUM | 4.6 | 0.5% | Oct 15, 2020 | SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that maintain sessions with a us... |
| CVE-2020-6323 | MEDIUM | 6.1 | 0.6% | Oct 15, 2020 | SAP NetWeaver Enterprise Portal (Fiori Framework Page) versions - 7.50, 7.31, 7.40, does not sufficiently encode user-co... |
| CVE-2020-6319 | MEDIUM | 6.1 | 0.9% | Oct 15, 2020 | SAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 allows an unauthenticated... |
| CVE-2020-6272 | MEDIUM | 5.4 | 0.5% | Oct 15, 2020 | SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenti... |
| CVE-2020-8350 | HIGH | 8.8 | 0.6% | Oct 14, 2020 | An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 th... |
| CVE-2020-8349 | CRITICAL | 9.8 | 2.2% | Oct 14, 2020 | An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Op... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now