2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6519 | MEDIUM | 6.5 | 11.3% | Jul 22, 2020 | Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy ... |
| CVE-2020-6518 | HIGH | 8.8 | 2.6% | Jul 22, 2020 | Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the... |
| CVE-2020-6517 | HIGH | 8.8 | 2.8% | Jul 22, 2020 | Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit ... |
| CVE-2020-6516 | MEDIUM | 4.3 | 4.8% | Jul 22, 2020 | Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a c... |
| CVE-2020-6515 | HIGH | 8.8 | 2.5% | Jul 22, 2020 | Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap... |
| CVE-2020-6514 | MEDIUM | 6.5 | 7.8% | Jul 22, 2020 | Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged networ... |
| CVE-2020-6513 | HIGH | 8.8 | 3.0% | Jul 22, 2020 | Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit h... |
| CVE-2020-6512 | HIGH | 8.8 | 3.0% | Jul 22, 2020 | Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corrup... |
| CVE-2020-6511 | MEDIUM | 6.5 | 1.7% | Jul 22, 2020 | Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cro... |
| CVE-2020-6510 | HIGH | 7.8 | 1.6% | Jul 22, 2020 | Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially... |
| CVE-2020-6509 | CRITICAL | 9.6 | 0.8% | Jul 22, 2020 | Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install... |
| CVE-2020-6507 | HIGH | 8.8 | 19.4% | Jul 22, 2020 | Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap ... |
| CVE-2020-6506 | MEDIUM | 6.5 | 3.8% | Jul 22, 2020 | Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker ... |
| CVE-2020-6505 | CRITICAL | 9.6 | 1.0% | Jul 22, 2020 | Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sand... |
| CVE-2020-8559 | MEDIUM | 6.8 | 6.1% | Jul 22, 2020 | The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable... |
| CVE-2020-12774 | MEDIUM | 6.7 | 0.4% | Jul 22, 2020 | D-Link DSL-7740C does not properly validate user input, which allows an authenticated LAN user to inject arbitrary comma... |
| CVE-2020-15890 | HIGH | 7.5 | 2.9% | Jul 21, 2020 | LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled. |
| CVE-2020-15889 | CRITICAL | 9.8 | 2.2% | Jul 21, 2020 | Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient... |
| CVE-2020-15888 | HIGH | 8.8 | 2.4% | Jul 21, 2020 | Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffe... |
| CVE-2020-15724 | HIGH | 7.8 | 0.6% | Jul 21, 2020 | In the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome.exe, there exists a loca... |
| CVE-2020-15723 | HIGH | 7.8 | 0.5% | Jul 21, 2020 | In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome... |
| CVE-2020-15722 | HIGH | 7.8 | 0.4% | Jul 21, 2020 | In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privileg... |
| CVE-2020-15102 | MEDIUM | 6.5 | 0.7% | Jul 21, 2020 | In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to c... |
| CVE-2020-14063 | MEDIUM | 6.1 | 1.4% | Jul 21, 2020 | A stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin before 1.2.2 for WordPress allows u... |
| CVE-2020-15879 | HIGH | 7.5 | 2.7% | Jul 21, 2020 | Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe,... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now