2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15947 | HIGH | 8.8 | 1.1% | Aug 13, 2020 | A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows... |
| CVE-2020-15925 | HIGH | 8.8 | 1.1% | Aug 13, 2020 | A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers t... |
| CVE-2020-13286 | MEDIUM | 4.3 | 0.7% | Aug 13, 2020 | For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server... |
| CVE-2020-13281 | MEDIUM | 6.5 | 1.3% | Aug 13, 2020 | For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature |
| CVE-2020-11733 | MEDIUM | 6.7 | 1.6% | Aug 13, 2020 | An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already... |
| CVE-2020-17463 | CRITICAL | 9.8 | 90.0% | Aug 13, 2020 | FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. |
| CVE-2020-16087 | HIGH | 8.6 | 1.3% | Aug 13, 2020 | An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Win... |
| CVE-2020-13285 | MEDIUM | 5.4 | 1.0% | Aug 13, 2020 | For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference numbe... |
| CVE-2020-13283 | MEDIUM | 5.4 | 0.8% | Aug 13, 2020 | For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone t... |
| CVE-2020-13282 | LOW | 3.5 | 0.7% | Aug 13, 2020 | For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access l... |
| CVE-2020-13280 | MEDIUM | 6.5 | 1.1% | Aug 13, 2020 | For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email er... |
| CVE-2020-4589 | CRITICAL | 9.8 | 8.5% | Aug 13, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the s... |
| CVE-2020-8720 | MEDIUM | 5.5 | 0.3% | Aug 13, 2020 | Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 m... |
| CVE-2020-8689 | MEDIUM | 6.5 | 0.6% | Aug 13, 2020 | Improper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may allow an unauthenticated us... |
| CVE-2020-8688 | HIGH | 7.5 | 1.5% | Aug 13, 2020 | Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potential... |
| CVE-2020-8687 | HIGH | 7.8 | 0.3% | Aug 13, 2020 | Uncontrolled search path in the installer for Intel(R) RSTe Software RAID Driver for the Intel(R) Server Board M10JNP2SB... |
| CVE-2020-8685 | MEDIUM | 4.4 | 0.3% | Aug 13, 2020 | Improper authentication in subsystem for Intel (R) LED Manager for NUC before version 1.2.3 may allow privileged user to... |
| CVE-2020-8684 | MEDIUM | 6.7 | 0.3% | Aug 13, 2020 | Improper access control in firmware for Intel(R) PAC with Arria(R) 10 GX FPGA before Intel Acceleration Stack version 1.... |
| CVE-2020-8683 | MEDIUM | 5.5 | 0.3% | Aug 13, 2020 | Improper buffer restrictions in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow ... |
| CVE-2020-8682 | MEDIUM | 5.5 | 0.3% | Aug 13, 2020 | Out of bounds read in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authent... |
| CVE-2020-8681 | HIGH | 7.8 | 0.4% | Aug 13, 2020 | Out of bounds write in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authen... |
| CVE-2020-8680 | HIGH | 7 | 0.2% | Aug 13, 2020 | Race condition in some Intel(R) Graphics Drivers before version 15.40.45.5126 may allow an authenticated user to potenti... |
| CVE-2020-8679 | MEDIUM | 5.5 | 0.3% | Aug 13, 2020 | Out-of-bounds write in Kernel Mode Driver for some Intel(R) Graphics Drivers before version 26.20.100.7755 may allow an ... |
| CVE-2020-7307 | MEDIUM | 5.2 | 0.3% | Aug 13, 2020 | Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows loc... |
| CVE-2020-12301 | HIGH | 8.2 | 0.3% | Aug 13, 2020 | Improper initialization in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a pri... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now