2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9246 | MEDIUM | 6.5 | 0.6% | Aug 21, 2020 | FusionCompute 8.0.0 has an information leak vulnerability. A module does not launch strict access control and informatio... |
| CVE-2020-9104 | MEDIUM | 4.3 | 0.3% | Aug 21, 2020 | HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C432E22R2P5),... |
| CVE-2020-9096 | MEDIUM | 5.5 | 0.2% | Aug 21, 2020 | HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0.160(C00E160R2P8) have an out of bound read vulnerability. S... |
| CVE-2020-9095 | MEDIUM | 5.5 | 0.2% | Aug 21, 2020 | HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160(C00E160R2P8) has an integer overflow vulnerability. Some... |
| CVE-2020-24585 | MEDIUM | 5.3 | 0.9% | Aug 21, 2020 | An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messag... |
| CVE-2020-15309 | HIGH | 7 | 0.3% | Aug 21, 2020 | An issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local attackers can conduct a ca... |
| CVE-2020-12457 | HIGH | 7.5 | 1.5% | Aug 21, 2020 | An issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS) message processing logic for... |
| CVE-2020-5774 | HIGH | 7.1 | 0.3% | Aug 21, 2020 | Nessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted period in certain scenarios... |
| CVE-2020-3976 | MEDIUM | 5.3 | 2.1% | Aug 21, 2020 | VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication serv... |
| CVE-2020-16241 | LOW | 2.1 | 0.2% | Aug 21, 2020 | Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unaut... |
| CVE-2020-16239 | MEDIUM | 4.9 | 0.9% | Aug 21, 2020 | When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficie... |
| CVE-2020-16237 | LOW | 2.1 | 0.3% | Aug 21, 2020 | Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that... |
| CVE-2020-14518 | MEDIUM | 5.3 | 1.3% | Aug 21, 2020 | Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker. |
| CVE-2020-7710 | CRITICAL | 9.8 | 1.4% | Aug 21, 2020 | This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host m... |
| CVE-2020-7310 | MEDIUM | 6.9 | 0.3% | Aug 21, 2020 | Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 all... |
| CVE-2020-15070 | HIGH | 8.8 | 1.2% | Aug 21, 2020 | Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres... |
| CVE-2020-14215 | HIGH | 7.5 | 0.9% | Aug 21, 2020 | Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrato... |
| CVE-2020-14194 | MEDIUM | 5.4 | 0.7% | Aug 21, 2020 | Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link. |
| CVE-2020-12759 | MEDIUM | 6.1 | 0.7% | Aug 21, 2020 | Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook. |
| CVE-2020-24574 | HIGH | 7.8 | 0.6% | Aug 21, 2020 | The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local pri... |
| CVE-2020-24571 | HIGH | 7.5 | 18.0% | Aug 21, 2020 | NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal. |
| CVE-2020-24567 | HIGH | 7.8 | 0.6% | Aug 21, 2020 | voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file... |
| CVE-2020-12619 | MEDIUM | 5.9 | 0.4% | Aug 20, 2020 | MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowe... |
| CVE-2020-12618 | MEDIUM | 4.8 | 0.3% | Aug 20, 2020 | eM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently replaced existing ones. Thi... |
| CVE-2020-24359 | HIGH | 7.5 | 1.0% | Aug 20, 2020 | HashiCorp vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet i... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now