2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15202 | CRITICAL | 9 | 1.2% | Sep 25, 2020 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argu... |
| CVE-2020-15201 | MEDIUM | 4.8 | 0.6% | Sep 25, 2020 | In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not validate that the input argume... |
| CVE-2020-15200 | MEDIUM | 5.9 | 0.8% | Sep 25, 2020 | In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not validate that the input argume... |
| CVE-2020-15199 | MEDIUM | 5.9 | 0.8% | Sep 25, 2020 | In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` does not validate that the input arguments form a vali... |
| CVE-2020-15198 | MEDIUM | 5.4 | 0.5% | Sep 25, 2020 | In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not validate that the input argume... |
| CVE-2020-15197 | MEDIUM | 6.3 | 0.7% | Sep 25, 2020 | In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not validate that the input argume... |
| CVE-2020-15196 | CRITICAL | 9.9 | 0.9% | Sep 25, 2020 | In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` implementations don't validate ... |
| CVE-2020-15195 | HIGH | 8.8 | 0.9% | Sep 25, 2020 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the implementation of `SparseFillEmptyRowsGrad` use... |
| CVE-2020-15194 | MEDIUM | 5.3 | 1.0% | Sep 25, 2020 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `SparseFillEmptyRowsGrad` implementation has in... |
| CVE-2020-15193 | HIGH | 7.1 | 0.7% | Sep 25, 2020 | In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of `dlpack.to_dlpack` can be made to use uninitialized... |
| CVE-2020-15192 | MEDIUM | 4.3 | 0.7% | Sep 25, 2020 | In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to `dlpack.to_dlpack` there is a memor... |
| CVE-2020-15191 | MEDIUM | 5.3 | 0.7% | Sep 25, 2020 | In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `dlpack.to_dlpack` the expected v... |
| CVE-2020-15190 | MEDIUM | 5.3 | 0.9% | Sep 25, 2020 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `tf.raw_ops.Switch` operation takes as input a ... |
| CVE-2020-25149 | HIGH | 8.8 | 3.2% | Sep 25, 2020 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory trav... |
| CVE-2020-25148 | MEDIUM | 6.1 | 0.8% | Sep 25, 2020 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scr... |
| CVE-2020-25147 | CRITICAL | 9.8 | 1.4% | Sep 25, 2020 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection ... |
| CVE-2020-25146 | MEDIUM | 6.1 | 0.8% | Sep 25, 2020 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scr... |
| CVE-2020-25145 | HIGH | 8.8 | 3.2% | Sep 25, 2020 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory trav... |
| CVE-2020-25144 | HIGH | 8.8 | 3.2% | Sep 25, 2020 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory trav... |
| CVE-2020-25143 | HIGH | 8.8 | 1.2% | Sep 25, 2020 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection ... |
| CVE-2020-25142 | MEDIUM | 6.5 | 0.5% | Sep 25, 2020 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable if any links and ... |
| CVE-2020-25141 | MEDIUM | 6.1 | 0.7% | Sep 25, 2020 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scr... |
| CVE-2020-16242 | MEDIUM | 6.1 | 0.7% | Sep 25, 2020 | The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to tric... |
| CVE-2020-14495 | — | — | — | Sep 25, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-4727 | MEDIUM | 6.1 | 0.9% | Sep 25, 2020 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By per... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now