2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-24563 | HIGH | 7.8 | 0.5% | Sep 29, 2020 | A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unloa... |
| CVE-2020-24562 | HIGH | 7.8 | 0.6% | Sep 29, 2020 | A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any... |
| CVE-2020-26121 | HIGH | 7.5 | 1.3% | Sep 27, 2020 | An issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker can import a file even wh... |
| CVE-2020-26120 | MEDIUM | 6.1 | 1.0% | Sep 27, 2020 | XSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is mishandled during regex s... |
| CVE-2020-25869 | HIGH | 7.5 | 1.4% | Sep 27, 2020 | An information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. Handling of acto... |
| CVE-2020-25828 | MEDIUM | 6.1 | 1.1% | Sep 27, 2020 | An issue was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. The non-jqueryMsg version o... |
| CVE-2020-25827 | HIGH | 7.5 | 1.8% | Sep 27, 2020 | An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. F... |
| CVE-2020-25815 | MEDIUM | 6.1 | 1.1% | Sep 27, 2020 | An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely usi... |
| CVE-2020-25814 | MEDIUM | 6.1 | 1.4% | Sep 27, 2020 | In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur. The attacker creat... |
| CVE-2020-25813 | MEDIUM | 5.3 | 1.3% | Sep 27, 2020 | In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, Special:UserRights exposes the existence of hidden ... |
| CVE-2020-25812 | MEDIUM | 6.1 | 1.1% | Sep 27, 2020 | An issue was discovered in MediaWiki 1.34.x before 1.34.4. On Special:Contributions, the NS filter uses unescaped messag... |
| CVE-2020-26117 | HIGH | 8.1 | 3.1% | Sep 27, 2020 | In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exception... |
| CVE-2020-26116 | HIGH | 7.2 | 6.4% | Sep 27, 2020 | http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF inj... |
| CVE-2020-15214 | HIGH | 8.1 | 0.6% | Sep 25, 2020 | In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger a write out bounds / segmentati... |
| CVE-2020-15213 | MEDIUM | 4 | 0.6% | Sep 25, 2020 | In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger a denial of service by causing ... |
| CVE-2020-15212 | HIGH | 8.6 | 0.6% | Sep 25, 2020 | In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger writes outside of bounds of hea... |
| CVE-2020-15211 | MEDIUM | 4.8 | 0.9% | Sep 25, 2020 | In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in the flatbuffer format use a do... |
| CVE-2020-15210 | MEDIUM | 6.5 | 0.7% | Sep 25, 2020 | In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite saved model uses the same tensor a... |
| CVE-2020-15209 | MEDIUM | 5.9 | 0.8% | Sep 25, 2020 | In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLite model can force a node to hav... |
| CVE-2020-15208 | CRITICAL | 9.8 | 0.9% | Sep 25, 2020 | In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determining the common dimension size of ... |
| CVE-2020-15207 | CRITICAL | 9 | 1.2% | Sep 25, 2020 | In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python's indexing with negative value... |
| CVE-2020-15206 | HIGH | 7.5 | 0.9% | Sep 25, 2020 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorFlow's `SavedModel` protocol buf... |
| CVE-2020-15205 | CRITICAL | 9.8 | 1.0% | Sep 25, 2020 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` argument of `tf.raw_ops.StringNGr... |
| CVE-2020-15204 | MEDIUM | 5.3 | 0.9% | Sep 25, 2020 | In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not set the session state. Hence, c... |
| CVE-2020-15203 | HIGH | 7.5 | 1.0% | Sep 25, 2020 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `fill` argument of tf.strings.as... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now