2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9102 | LOW | 3.3 | 0.2% | Jul 17, 2020 | There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get informatio... |
| CVE-2020-7818 | HIGH | 7.8 | 1.2% | Jul 17, 2020 | DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF fil... |
| CVE-2020-7206 | CRITICAL | 9.8 | 1.7% | Jul 17, 2020 | HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection vulnerability. |
| CVE-2020-5769 | MEDIUM | 5.4 | 0.6% | Jul 17, 2020 | Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.02 allows a remote, authenticated attacker to conduc... |
| CVE-2020-5768 | MEDIUM | 4.9 | 2.0% | Jul 17, 2020 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram Email Subscribers & News... |
| CVE-2020-5767 | MEDIUM | 6.5 | 0.9% | Jul 17, 2020 | Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attack... |
| CVE-2020-10605 | HIGH | 7.5 | 1.1% | Jul 17, 2020 | Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files. |
| CVE-2020-5759 | CRITICAL | 9.8 | 3.2% | Jul 17, 2020 | Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authen... |
| CVE-2020-5758 | HIGH | 8.8 | 4.4% | Jul 17, 2020 | Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authe... |
| CVE-2020-5757 | CRITICAL | 9.8 | 6.9% | Jul 17, 2020 | Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authe... |
| CVE-2020-5756 | HIGH | 8.8 | 2.5% | Jul 17, 2020 | Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab ... |
| CVE-2020-4104 | MEDIUM | 5.4 | 0.5% | Jul 17, 2020 | HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can us... |
| CVE-2020-15110 | HIGH | 8.1 | 0.9% | Jul 17, 2020 | In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant ... |
| CVE-2020-15108 | HIGH | 7.1 | 1.2% | Jul 17, 2020 | In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1. |
| CVE-2020-0231 | CRITICAL | 9.8 | 0.4% | Jul 17, 2020 | There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid I... |
| CVE-2020-0230 | CRITICAL | 9.8 | 0.5% | Jul 17, 2020 | There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid I... |
| CVE-2020-0228 | HIGH | 7.5 | 0.4% | Jul 17, 2020 | There is an improper configuration of recorder related service. Product: AndroidVersions: Android SoCAndroid ID: A-15633... |
| CVE-2020-0227 | HIGH | 7.8 | 0.3% | Jul 17, 2020 | In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission c... |
| CVE-2020-0226 | HIGH | 7.8 | 0.3% | Jul 17, 2020 | In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lead... |
| CVE-2020-0225 | CRITICAL | 9.8 | 2.7% | Jul 17, 2020 | In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due to... |
| CVE-2020-0224 | CRITICAL | 9.8 | 1.6% | Jul 17, 2020 | In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could... |
| CVE-2020-0122 | MEDIUM | 6.7 | 0.2% | Jul 17, 2020 | In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, th... |
| CVE-2020-0107 | MEDIUM | 5.5 | 0.1% | Jul 17, 2020 | In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validati... |
| CVE-2020-15816 | HIGH | 8.8 | 3.5% | Jul 17, 2020 | In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could p... |
| CVE-2020-0305 | MEDIUM | 6.4 | 0.2% | Jul 17, 2020 | In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalati... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now