2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-21731 | MEDIUM | 6.1 | 0.9% | Sep 14, 2020 | Gazie 7.29 is affected by: Cross Site Scripting (XSS) via http://192.168.100.7/gazie/modules/config/admin_utente.php?use... |
| CVE-2020-25291 | HIGH | 7.8 | 1.6% | Sep 13, 2020 | GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in ... |
| CVE-2020-25289 | MEDIUM | 5.5 | 0.4% | Sep 13, 2020 | The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Man... |
| CVE-2020-25287 | HIGH | 7.2 | 2.7% | Sep 13, 2020 | Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any fil... |
| CVE-2020-25286 | MEDIUM | 5.3 | 1.9% | Sep 13, 2020 | In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in t... |
| CVE-2020-25285 | MEDIUM | 6.4 | 0.3% | Sep 13, 2020 | A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local... |
| CVE-2020-25284 | MEDIUM | 4.1 | 0.3% | Sep 13, 2020 | The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking... |
| CVE-2020-25283 | CRITICAL | 9.8 | 0.5% | Sep 11, 2020 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT manager allows attackers... |
| CVE-2020-25282 | CRITICAL | 9.8 | 0.4% | Sep 11, 2020 | An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software (for the LG Universal Inte... |
| CVE-2020-25281 | HIGH | 7.5 | 0.3% | Sep 11, 2020 | An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sen... |
| CVE-2020-25280 | MEDIUM | 6.8 | 0.2% | Sep 11, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos and MediaTek chipsets) software. Unauthenticated ... |
| CVE-2020-25279 | CRITICAL | 9.8 | 0.7% | Sep 11, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The baseb... |
| CVE-2020-25278 | CRITICAL | 9.8 | 0.7% | Sep 11, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The Quram image codec libra... |
| CVE-2020-23824 | HIGH | 8.8 | 1.2% | Sep 11, 2020 | ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery (CSRF) for perform remote arbitrary code executi... |
| CVE-2020-14363 | HIGH | 7.8 | 0.6% | Sep 11, 2020 | An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged atta... |
| CVE-2020-14332 | MEDIUM | 5.5 | 0.4% | Sep 11, 2020 | A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not prop... |
| CVE-2020-14330 | MEDIUM | 5.5 | 0.6% | Sep 11, 2020 | An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is ... |
| CVE-2020-1598 | MEDIUM | 6.1 | 0.9% | Sep 11, 2020 | <p>An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly han... |
| CVE-2020-1596 | MEDIUM | 5.4 | 0.9% | Sep 11, 2020 | <p>A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfu... |
| CVE-2020-1595 | CRITICAL | 9.9 | 2.0% | Sep 11, 2020 | <p>A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe... |
| CVE-2020-1594 | HIGH | 7.8 | 3.7% | Sep 11, 2020 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle o... |
| CVE-2020-1593 | HIGH | 7.6 | 2.8% | Sep 11, 2020 | <p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker... |
| CVE-2020-1592 | MEDIUM | 4.4 | 1.2% | Sep 11, 2020 | <p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p> ... |
| CVE-2020-1590 | MEDIUM | 6.6 | 0.8% | Sep 11, 2020 | <p>An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly h... |
| CVE-2020-1589 | MEDIUM | 4.4 | 1.3% | Sep 11, 2020 | <p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attac... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now