2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-15947HIGH8.8A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows...
CVE-2020-15925HIGH8.8A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers t...
CVE-2020-13286MEDIUM4.3For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server...
CVE-2020-13281MEDIUM6.5For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature
CVE-2020-11733MEDIUM6.7An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already...
CVE-2020-17463CRITICAL9.8FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.
CVE-2020-16087HIGH8.6An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Win...
CVE-2020-13285MEDIUM5.4For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference numbe...
CVE-2020-13283MEDIUM5.4For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone t...
CVE-2020-13282LOW3.5For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access l...
CVE-2020-13280MEDIUM6.5For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email er...
CVE-2020-4589CRITICAL9.8IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the s...
CVE-2020-8720MEDIUM5.5Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 m...
CVE-2020-8689MEDIUM6.5Improper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may allow an unauthenticated us...
CVE-2020-8688HIGH7.5Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potential...
CVE-2020-8687HIGH7.8Uncontrolled search path in the installer for Intel(R) RSTe Software RAID Driver for the Intel(R) Server Board M10JNP2SB...
CVE-2020-8685MEDIUM4.4Improper authentication in subsystem for Intel (R) LED Manager for NUC before version 1.2.3 may allow privileged user to...
CVE-2020-8684MEDIUM6.7Improper access control in firmware for Intel(R) PAC with Arria(R) 10 GX FPGA before Intel Acceleration Stack version 1....
CVE-2020-8683MEDIUM5.5Improper buffer restrictions in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow ...
CVE-2020-8682MEDIUM5.5Out of bounds read in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authent...
CVE-2020-8681HIGH7.8Out of bounds write in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authen...
CVE-2020-8680HIGH7Race condition in some Intel(R) Graphics Drivers before version 15.40.45.5126 may allow an authenticated user to potenti...
CVE-2020-8679MEDIUM5.5Out-of-bounds write in Kernel Mode Driver for some Intel(R) Graphics Drivers before version 26.20.100.7755 may allow an ...
CVE-2020-7307MEDIUM5.2Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows loc...
CVE-2020-12301HIGH8.2Improper initialization in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a pri...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now