2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6330 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources... |
| CVE-2020-6329 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources... |
| CVE-2020-6328 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources... |
| CVE-2020-6327 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources... |
| CVE-2020-6326 | MEDIUM | 5.4 | 0.6% | Sep 9, 2020 | SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious ... |
| CVE-2020-6322 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources... |
| CVE-2020-6321 | MEDIUM | 6.5 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources... |
| CVE-2020-6320 | HIGH | 8.1 | 1.0% | Sep 9, 2020 | SAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain functions that are rest... |
| CVE-2020-6318 | HIGH | 7.2 | 5.6% | Sep 9, 2020 | A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (>... |
| CVE-2020-6314 | MEDIUM | 4.3 | 1.6% | Sep 9, 2020 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted source... |
| CVE-2020-6313 | MEDIUM | 6.5 | 0.7% | Sep 9, 2020 | SAP NetWeaver Application Server JAVA(XML Forms) versions 7.30, 7.31, 7.40, 7.50 does not sufficiently encode user contr... |
| CVE-2020-6312 | MEDIUM | 5.4 | 0.5% | Sep 9, 2020 | SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), versions - 4.1, 4.2, allows an att... |
| CVE-2020-6302 | HIGH | 8.1 | 0.8% | Sep 9, 2020 | SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is... |
| CVE-2020-6288 | MEDIUM | 5.3 | 0.7% | Sep 9, 2020 | SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) allows an attacker with edit docum... |
| CVE-2020-6283 | MEDIUM | 6.1 | 0.7% | Sep 9, 2020 | SAP Fiori Launchpad does not sufficiently encode user controlled inputs, and hence allowing the attacker to inject the m... |
| CVE-2020-14342 | HIGH | 7 | 0.7% | Sep 9, 2020 | It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to... |
| CVE-2020-7325 | HIGH | 7.8 | 0.3% | Sep 9, 2020 | Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files wh... |
| CVE-2020-7324 | MEDIUM | 6.1 | 0.3% | Sep 9, 2020 | Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass secur... |
| CVE-2020-7323 | MEDIUM | 6.9 | 0.3% | Sep 9, 2020 | Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2... |
| CVE-2020-7322 | MEDIUM | 4.7 | 0.2% | Sep 9, 2020 | Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update... |
| CVE-2020-7320 | HIGH | 7.3 | 0.3% | Sep 9, 2020 | Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 ... |
| CVE-2020-7319 | HIGH | 8.8 | 0.4% | Sep 9, 2020 | Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Updat... |
| CVE-2020-5627 | MEDIUM | 6.1 | 0.9% | Sep 9, 2020 | Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary websi... |
| CVE-2020-3679 | MEDIUM | 5.5 | 0.3% | Sep 9, 2020 | u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known... |
| CVE-2020-3674 | MEDIUM | 5.5 | 0.2% | Sep 9, 2020 | Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdr... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now