2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8346 | MEDIUM | 5.5 | 0.2% | Sep 15, 2020 | A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation... |
| CVE-2020-8342 | HIGH | 7 | 0.2% | Sep 15, 2020 | A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalati... |
| CVE-2020-8340 | MEDIUM | 6.1 | 0.6% | Sep 15, 2020 | A cross-site scripting (XSS) vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 (Integrated Managem... |
| CVE-2020-8339 | MEDIUM | 6.1 | 0.7% | Sep 15, 2020 | A cross-site scripting inclusion (XSSI) vulnerability was reported in the legacy IBM BladeCenter Advanced Management Mod... |
| CVE-2020-4711 | MEDIUM | 6.5 | 2.6% | Sep 15, 2020 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to traverse directories on the system. An ... |
| CVE-2020-4703 | HIGH | 8 | 1.8% | Sep 15, 2020 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload a... |
| CVE-2020-4530 | MEDIUM | 5.4 | 0.6% | Sep 15, 2020 | IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site s... |
| CVE-2020-4526 | MEDIUM | 4.3 | 0.5% | Sep 15, 2020 | IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery which could allow an attacker to... |
| CVE-2020-4521 | HIGH | 8.8 | 6.5% | Sep 15, 2020 | IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the... |
| CVE-2020-4344 | LOW | 3.3 | 0.3% | Sep 15, 2020 | IBM Tivoli Business Service Manager 6.2.0.0 - 6.2.0.2 IF 1 allows web pages to be stored locally which can be read by an... |
| CVE-2020-23512 | CRITICAL | 9.8 | 2.3% | Sep 15, 2020 | VR CAM P1 Model P1 v1 has an incorrect access control vulnerability where an attacker can obtain complete access of the ... |
| CVE-2020-23451 | HIGH | 8.8 | 0.6% | Sep 15, 2020 | Spiceworks Version <= 7.5.00107 is affected by CSRF which can lead to privilege escalation via "/settings/v1/users" func... |
| CVE-2020-16101 | HIGH | 7.5 | 1.0% | Sep 15, 2020 | It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out... |
| CVE-2020-16100 | HIGH | 7.5 | 1.0% | Sep 15, 2020 | It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websoc... |
| CVE-2020-16099 | MEDIUM | 4.3 | 0.8% | Sep 15, 2020 | In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour events that when accessed... |
| CVE-2020-16098 | CRITICAL | 9.8 | 1.1% | Sep 15, 2020 | It is possible to enumerate access card credentials via an unauthenticated network connection to the server in versions ... |
| CVE-2020-16097 | MEDIUM | 4.6 | 0.3% | Sep 15, 2020 | On controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)), v8.10 prior to vGR8.... |
| CVE-2020-16096 | HIGH | 7.7 | 0.8% | Sep 15, 2020 | In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(... |
| CVE-2020-14345 | HIGH | 7.8 | 0.6% | Sep 15, 2020 | A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead... |
| CVE-2020-24925 | HIGH | 7.5 | 1.0% | Sep 15, 2020 | A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the pa... |
| CVE-2020-24924 | MEDIUM | 5.4 | 0.8% | Sep 15, 2020 | A Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3, where an attacker can steal the user ses... |
| CVE-2020-13308 | LOW | 2.7 | 1.6% | Sep 15, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authenticat... |
| CVE-2020-13307 | MEDIUM | 4.7 | 1.0% | Sep 15, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not revoking current use... |
| CVE-2020-13303 | MEDIUM | 6.5 | 1.2% | Sep 15, 2020 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Due to improper verification of per... |
| CVE-2020-8927 | MEDIUM | 6.5 | 3.2% | Sep 15, 2020 | A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now