2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7680 | MEDIUM | 6.1 | 4.5% | Jul 20, 2020 | docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS). Docsify.js uses fragment identifiers (parameters a... |
| CVE-2020-12031 | HIGH | 7.8 | 0.6% | Jul 20, 2020 | In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a lo... |
| CVE-2020-12028 | HIGH | 8.1 | 51.0% | Jul 20, 2020 | In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to int... |
| CVE-2020-12027 | MEDIUM | 4.3 | 53.0% | Jul 20, 2020 | All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote,... |
| CVE-2020-8215 | HIGH | 8.8 | 2.3% | Jul 20, 2020 | A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitra... |
| CVE-2020-8205 | HIGH | 7.5 | 1.2% | Jul 20, 2020 | The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, w... |
| CVE-2020-14494 | CRITICAL | 9.8 | 1.3% | Jul 20, 2020 | OpenClinic GA versions 5.09.02 and 5.89.05b contain an authentication mechanism within the system that does not provide ... |
| CVE-2020-14491 | MEDIUM | 6.5 | 0.8% | Jul 20, 2020 | OpenClinic GA versions 5.09.02 and 5.89.05b do not properly check permissions before executing SQL queries, which may al... |
| CVE-2020-14485 | CRITICAL | 9.8 | 2.5% | Jul 20, 2020 | OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted... |
| CVE-2020-14484 | CRITICAL | 9.8 | 1.2% | Jul 20, 2020 | OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection, whi... |
| CVE-2020-12029 | HIGH | 7.8 | 45.0% | Jul 20, 2020 | All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, un... |
| CVE-2020-4527 | MEDIUM | 5.9 | 1.3% | Jul 20, 2020 | IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set t... |
| CVE-2020-4466 | MEDIUM | 6.5 | 1.4% | Jul 20, 2020 | IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow a remote authenticated attacker could cause a denial of service due t... |
| CVE-2020-4361 | MEDIUM | 4.3 | 1.0% | Jul 20, 2020 | IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by disclosing private IP addres... |
| CVE-2020-15009 | HIGH | 7.8 | 0.4% | Jul 20, 2020 | AsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe in ScreenPad2_Upgrade_Tool.msi V1.0.3 for ASUS PCs ... |
| CVE-2020-15842 | HIGH | 8.1 | 1.8% | Jul 20, 2020 | Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, ... |
| CVE-2020-15841 | HIGH | 8.8 | 1.5% | Jul 20, 2020 | Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, ... |
| CVE-2020-9256 | MEDIUM | 6.5 | 0.6% | Jul 18, 2020 | Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150(C00E136R5P3) have an improper authorization vulnera... |
| CVE-2020-9101 | MEDIUM | 6.5 | 0.3% | Jul 18, 2020 | There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets wit... |
| CVE-2020-9259 | MEDIUM | 6.5 | 0.8% | Jul 17, 2020 | Huawei Honor V30 smartphones with versions earlier than 10.1.0.212(C00E210R5P1) have an improper authentication vulnerab... |
| CVE-2020-9257 | HIGH | 8.8 | 0.8% | Jul 17, 2020 | HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C... |
| CVE-2020-9255 | MEDIUM | 5.5 | 0.5% | Jul 17, 2020 | Huawei Honor 10 smartphones with versions earlier than 10.0.0.178(C00E178R1P4) have a denial of service vulnerability. C... |
| CVE-2020-9254 | HIGH | 7.8 | 0.9% | Jul 17, 2020 | HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C... |
| CVE-2020-9252 | LOW | 2.3 | 0.2% | Jul 17, 2020 | HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R... |
| CVE-2020-9227 | MEDIUM | 5.5 | 0.5% | Jul 17, 2020 | Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerab... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now