2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-11855HIGH7.8An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The...
CVE-2020-8887HIGH7.5Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauth...
CVE-2020-24619MEDIUM5.9In mainwindow.cpp in Shotcut before 20.09.13, the upgrade check misuses TLS because of setPeerVerifyMode(QSslSocket::Ver...
CVE-2020-7734HIGH8.2All versions of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.
CVE-2020-6576HIGH8.8Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially expl...
CVE-2020-6575HIGH8.3Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process ...
CVE-2020-6574HIGH7.8Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker to...
CVE-2020-6573CRITICAL9.6Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised...
CVE-2020-6571MEDIUM4.3Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform doma...
CVE-2020-6570MEDIUM4.3Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sen...
CVE-2020-6569MEDIUM6.3Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the rend...
CVE-2020-6568MEDIUM6.5Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote at...
CVE-2020-6567MEDIUM6.5Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 al...
CVE-2020-6566MEDIUM6.5Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-...
CVE-2020-6565MEDIUM6.5Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoof...
CVE-2020-6564MEDIUM6.5Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof th...
CVE-2020-6563MEDIUM6.5Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote at...
CVE-2020-6562MEDIUM6.5Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-...
CVE-2020-6561MEDIUM6.5Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker...
CVE-2020-6560MEDIUM6.5Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cro...
CVE-2020-6559HIGH8.8Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially explo...
CVE-2020-6558MEDIUM6.5Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to byp...
CVE-2020-6556HIGH8.8Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exp...
CVE-2020-6555HIGH7.6Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sens...
CVE-2020-6554HIGH8.6Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a ...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now