2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15687 | HIGH | 7.5 | 1.7% | Aug 31, 2020 | Missing access control restrictions in the Hypervisor component of the ACRN Project (v2.0 and v1.6.1) allow a malicious ... |
| CVE-2020-13828 | MEDIUM | 5.4 | 0.8% | Aug 31, 2020 | Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities that could allow remote authen... |
| CVE-2020-13472 | MEDIUM | 4.6 | 0.4% | Aug 31, 2020 | The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the... |
| CVE-2020-13471 | MEDIUM | 6.8 | 0.6% | Aug 31, 2020 | Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a spec... |
| CVE-2020-13470 | MEDIUM | 4.6 | 0.4% | Aug 31, 2020 | Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible b... |
| CVE-2020-13469 | MEDIUM | 4.6 | 0.4% | Aug 31, 2020 | The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via th... |
| CVE-2020-13468 | MEDIUM | 6.8 | 0.5% | Aug 31, 2020 | Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection i... |
| CVE-2020-13467 | MEDIUM | 4.6 | 0.3% | Aug 31, 2020 | The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attacker... |
| CVE-2020-13466 | MEDIUM | 6.8 | 0.4% | Aug 31, 2020 | STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power g... |
| CVE-2020-13465 | MEDIUM | 6.8 | 0.5% | Aug 31, 2020 | The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execut... |
| CVE-2020-13464 | MEDIUM | 4.2 | 0.2% | Aug 31, 2020 | The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attacker... |
| CVE-2020-13463 | MEDIUM | 4.6 | 0.3% | Aug 31, 2020 | The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firm... |
| CVE-2020-5419 | MEDIUM | 6.7 | 0.5% | Aug 31, 2020 | RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allow... |
| CVE-2020-24786 | CRITICAL | 9.8 | 12.8% | Aug 31, 2020 | An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number ... |
| CVE-2020-13655 | MEDIUM | 6.1 | 0.7% | Aug 31, 2020 | An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is s... |
| CVE-2020-13595 | MEDIUM | 6.5 | 0.9% | Aug 31, 2020 | The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for ESP32 devices) return... |
| CVE-2020-13594 | MEDIUM | 6.5 | 0.8% | Aug 31, 2020 | The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does n... |
| CVE-2020-13593 | HIGH | 8.8 | 0.3% | Aug 31, 2020 | The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R... |
| CVE-2020-12829 | LOW | 3.8 | 0.4% | Aug 31, 2020 | In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the... |
| CVE-2020-12646 | MEDIUM | 5.4 | 0.5% | Aug 31, 2020 | OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document. |
| CVE-2020-12645 | CRITICAL | 9.8 | 1.1% | Aug 31, 2020 | OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed va... |
| CVE-2020-12644 | MEDIUM | 5 | 0.7% | Aug 31, 2020 | OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API. |
| CVE-2020-12643 | MEDIUM | 4.3 | 0.6% | Aug 31, 2020 | OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing ... |
| CVE-2020-11618 | HIGH | 7.8 | 0.4% | Aug 31, 2020 | THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their TELNET service hardcoded to start ... |
| CVE-2020-11617 | MEDIUM | 5.9 | 0.4% | Aug 31, 2020 | The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn't validate the S... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now