2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-12911MEDIUM5.5A denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g. v...
CVE-2020-25645HIGH7.5A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted...
CVE-2020-13957CRITICAL9.8Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (whic...
CVE-2020-15251MEDIUM6.5In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to op/voice and t...
CVE-2020-17417HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35...
CVE-2020-17416HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35...
CVE-2020-17415HIGH7.8This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35...
CVE-2020-17414HIGH7.8This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798....
CVE-2020-17413HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0....
CVE-2020-17412HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0....
CVE-2020-17411LOW3.3This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomP...
CVE-2020-17410HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0....
CVE-2020-17409MEDIUM6.5This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETG...
CVE-2020-17407CRITICAL9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE p...
CVE-2020-17406HIGH8.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE p...
CVE-2020-7590MEDIUM6.8A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addit...
CVE-2020-25779LOW3.3Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph att...
CVE-2020-15797MEDIUM6.8A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addit...
CVE-2020-16124CRITICAL9.8Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages all...
CVE-2020-7743HIGH7.3The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configu...
CVE-2020-15012HIGH8.6A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests...
CVE-2020-26546HIGH7.5An issue was discovered in HelpDeskZ 1.0.2. The feature to auto-login a user, via the RememberMe functionality, is prone...
CVE-2020-15250MEDIUM5.5In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vuln...
CVE-2020-25825HIGH7.5In Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in the task logs.
CVE-2020-13903——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-12254. Reason: This candidate is a reservation d...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now