2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15698 | MEDIUM | 5.3 | 1.6% | Jul 15, 2020 | An issue was discovered in Joomla! through 3.9.19. Inadequate filtering on the system information screen could expose Re... |
| CVE-2020-15697 | MEDIUM | 4.3 | 1.0% | Jul 15, 2020 | An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified b... |
| CVE-2020-15696 | MEDIUM | 6.1 | 3.2% | Jul 15, 2020 | An issue was discovered in Joomla! through 3.9.19. Lack of input filtering and escaping allows XSS attacks in mod_random... |
| CVE-2020-15695 | MEDIUM | 6.3 | 0.6% | Jul 15, 2020 | An issue was discovered in Joomla! through 3.9.19. A missing token check in the remove request section of com_privacy ca... |
| CVE-2020-13923 | MEDIUM | 5.3 | 5.0% | Jul 15, 2020 | IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04 |
| CVE-2020-7292 | MEDIUM | 4.3 | 0.9% | Jul 15, 2020 | Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attac... |
| CVE-2020-5765 | MEDIUM | 5.4 | 1.1% | Jul 15, 2020 | Nessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper validation of input during sc... |
| CVE-2020-4100 | MEDIUM | 4.4 | 0.3% | Jul 15, 2020 | "HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a developer to specify which comp... |
| CVE-2020-14511 | CRITICAL | 9.8 | 1.4% | Jul 15, 2020 | Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server o... |
| CVE-2020-14503 | CRITICAL | 9.8 | 3.5% | Jul 15, 2020 | Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability. Successful exploitation of this... |
| CVE-2020-14501 | CRITICAL | 9.8 | 1.7% | Jul 15, 2020 | Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue. Successfu... |
| CVE-2020-14499 | HIGH | 7.5 | 1.7% | Jul 15, 2020 | Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful exploitation of this v... |
| CVE-2020-14507 | CRITICAL | 9.8 | 4.9% | Jul 15, 2020 | Advantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities that could allow an at... |
| CVE-2020-14505 | CRITICAL | 9.8 | 7.0% | Jul 15, 2020 | Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command ... |
| CVE-2020-14497 | CRITICAL | 9.8 | 4.9% | Jul 15, 2020 | Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use ... |
| CVE-2020-1481 | HIGH | 8.8 | 23.6% | Jul 14, 2020 | A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source cod... |
| CVE-2020-1469 | HIGH | 7.5 | 4.8% | Jul 14, 2020 | A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input, aka 'Bond Denial ... |
| CVE-2020-1468 | MEDIUM | 6.5 | 5.2% | Jul 14, 2020 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m... |
| CVE-2020-1465 | HIGH | 7.8 | 0.8% | Jul 14, 2020 | An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To... |
| CVE-2020-1463 | HIGH | 7.8 | 0.7% | Jul 14, 2020 | An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka '... |
| CVE-2020-1462 | MEDIUM | 4.3 | 4.2% | Jul 14, 2020 | An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based), ... |
| CVE-2020-1461 | HIGH | 7.1 | 0.7% | Jul 14, 2020 | An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary loc... |
| CVE-2020-1458 | HIGH | 7.8 | 10.9% | Jul 14, 2020 | A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic lin... |
| CVE-2020-1456 | MEDIUM | 5.4 | 2.2% | Jul 14, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2020-1454 | MEDIUM | 5.4 | 1.6% | Jul 14, 2020 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affecte... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now