2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-5976 | HIGH | 7.5 | 1.1% | Sep 18, 2020 | NVIDIA GeForce NOW, versions prior to 2.0.23 (Windows, macOS) and versions prior to 5.31 (Android, Shield TV), contains ... |
| CVE-2020-5975 | HIGH | 7.5 | 1.1% | Sep 18, 2020 | NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application s... |
| CVE-2020-15958 | HIGH | 8.6 | 2.7% | Sep 18, 2020 | An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files all... |
| CVE-2020-15773 | MEDIUM | 6.5 | 0.4% | Sep 18, 2020 | An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only... |
| CVE-2020-0354 | CRITICAL | 9.8 | 1.1% | Sep 18, 2020 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exec... |
| CVE-2020-0318 | MEDIUM | 5.5 | 0.1% | Sep 18, 2020 | In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent deni... |
| CVE-2020-0262 | HIGH | 7.8 | 0.2% | Sep 18, 2020 | In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to loc... |
| CVE-2020-0089 | HIGH | 7.8 | 0.1% | Sep 18, 2020 | In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding aud... |
| CVE-2020-15776 | HIGH | 8.8 | 2.0% | Sep 18, 2020 | An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. The CSRF prevention token is stored in a request cookie ... |
| CVE-2020-15775 | HIGH | 7.5 | 1.2% | Sep 18, 2020 | An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. The /usage page of Gradle Enterprise conveys high level ... |
| CVE-2020-15774 | MEDIUM | 6.8 | 0.3% | Sep 18, 2020 | An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. An attacker with physical access to the browser of a use... |
| CVE-2020-15772 | MEDIUM | 4.9 | 1.2% | Sep 18, 2020 | An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. When configuring Gradle Enterprise to integrate with a S... |
| CVE-2020-15771 | HIGH | 7.5 | 1.0% | Sep 18, 2020 | An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission ... |
| CVE-2020-15770 | MEDIUM | 5.5 | 0.3% | Sep 18, 2020 | An issue was discovered in Gradle Enterprise 2018.5. An attacker can potentially make repeated attempts to guess a local... |
| CVE-2020-15769 | MEDIUM | 6.1 | 0.7% | Sep 18, 2020 | An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4. An XSS issue exists via the request URL. |
| CVE-2020-15768 | HIGH | 7.5 | 1.7% | Sep 18, 2020 | An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2. Unrestr... |
| CVE-2020-15767 | MEDIUM | 5.3 | 0.5% | Sep 18, 2020 | An issue was discovered in Gradle Enterprise before 2020.2.5. The cookie used to convey the CSRF prevention token is not... |
| CVE-2020-5629 | MEDIUM | 6.5 | 1.0% | Sep 18, 2020 | UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website ... |
| CVE-2020-5628 | MEDIUM | 6.5 | 1.0% | Sep 18, 2020 | UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website ... |
| CVE-2020-5606 | MEDIUM | 6.1 | 0.8% | Sep 18, 2020 | Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary scr... |
| CVE-2020-5605 | MEDIUM | 4.3 | 1.1% | Sep 18, 2020 | Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive informati... |
| CVE-2020-25756 | CRITICAL | 9.8 | 1.6% | Sep 18, 2020 | A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of boun... |
| CVE-2020-25751 | HIGH | 8.8 | 1.8% | Sep 18, 2020 | The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=com_pago&view=c... |
| CVE-2020-25750 | HIGH | 7.5 | 1.1% | Sep 18, 2020 | An issue was discovered in DotPlant2 before 2020-09-14. In class Pay2PayPayment in payment/Pay2PayPayment.php, there is ... |
| CVE-2020-25744 | HIGH | 8.1 | 1.4% | Sep 18, 2020 | SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now