2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8216 | MEDIUM | 4.3 | 2.3% | Jul 30, 2020 | An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to ... |
| CVE-2020-8213 | MEDIUM | 5.3 | 1.1% | Jul 30, 2020 | An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attacke... |
| CVE-2020-8206 | HIGH | 8.1 | 3.0% | Jul 30, 2020 | An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users prim... |
| CVE-2020-8204 | MEDIUM | 6.1 | 1.8% | Jul 30, 2020 | A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page. |
| CVE-2020-8202 | MEDIUM | 5.3 | 1.3% | Jul 30, 2020 | Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when ... |
| CVE-2020-8192 | MEDIUM | 6.5 | 1.2% | Jul 30, 2020 | A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger reso... |
| CVE-2020-4186 | MEDIUM | 5.3 | 1.1% | Jul 30, 2020 | IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in furt... |
| CVE-2020-4185 | HIGH | 7.5 | 0.8% | Jul 30, 2020 | IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attack... |
| CVE-2020-14309 | MEDIUM | 6.7 | 0.5% | Jul 30, 2020 | There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link wi... |
| CVE-2020-10713 | HIGH | 8.2 | 1.1% | Jul 30, 2020 | A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB veri... |
| CVE-2020-3701 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Use after free issue while processing error notification from camx driver due to not properly releasing the sequence dat... |
| CVE-2020-3700 | HIGH | 7.5 | 1.1% | Jul 30, 2020 | Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi dri... |
| CVE-2020-3699 | CRITICAL | 9.8 | 0.9% | Jul 30, 2020 | Possible out of bound access while processing assoc response from host due to improper length check before copying into ... |
| CVE-2020-3698 | CRITICAL | 9.8 | 0.9% | Jul 30, 2020 | Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response f... |
| CVE-2020-3688 | CRITICAL | 9.8 | 0.9% | Jul 30, 2020 | Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapd... |
| CVE-2020-3671 | CRITICAL | 9.8 | 0.9% | Jul 30, 2020 | Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compu... |
| CVE-2020-7699 | CRITICAL | 9.8 | 4.7% | Jul 30, 2020 | This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP r... |
| CVE-2020-5610 | HIGH | 7.8 | 1.4% | Jul 30, 2020 | Global TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to cause a denial-of-service... |
| CVE-2020-16143 | HIGH | 7.8 | 0.4% | Jul 29, 2020 | The seafile-client client 7.0.8 for Seafile is vulnerable to DLL hijacking because it loads exchndl.dll from the current... |
| CVE-2020-16135 | MEDIUM | 5.9 | 4.1% | Jul 29, 2020 | libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL. |
| CVE-2020-14308 | MEDIUM | 6.4 | 0.4% | Jul 29, 2020 | In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested... |
| CVE-2020-5763 | HIGH | 8.8 | 2.7% | Jul 29, 2020 | Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated rem... |
| CVE-2020-5762 | HIGH | 7.5 | 3.4% | Jul 29, 2020 | Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-... |
| CVE-2020-5761 | HIGH | 7.5 | 4.1% | Jul 29, 2020 | Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in ... |
| CVE-2020-5760 | HIGH | 7.8 | 5.5% | Jul 29, 2020 | Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Una... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now