2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12406 | HIGH | 8.8 | 1.0% | Jul 9, 2020 | Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We ... |
| CVE-2020-12405 | MEDIUM | 5.3 | 1.4% | Jul 9, 2020 | When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploi... |
| CVE-2020-12404 | MEDIUM | 4.3 | 0.8% | Jul 9, 2020 | For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging... |
| CVE-2020-12402 | MEDIUM | 4.4 | 0.3% | Jul 9, 2020 | During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which enta... |
| CVE-2020-12399 | MEDIUM | 4.4 | 0.7% | Jul 9, 2020 | NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private... |
| CVE-2020-12398 | HIGH | 7.5 | 1.0% | Jul 9, 2020 | If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbi... |
| CVE-2020-7693 | MEDIUM | 5.3 | 5.0% | Jul 9, 2020 | Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This ... |
| CVE-2020-7692 | CRITICAL | 9.1 | 1.6% | Jul 9, 2020 | PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the a... |
| CVE-2020-7458 | CRITICAL | 9.8 | 1.9% | Jul 9, 2020 | In FreeBSD 12.1-STABLE before r362281, 11.4-STABLE before r362281, and 11.4-RELEASE before p1, long values in the user-c... |
| CVE-2020-7457 | HIGH | 8.1 | 33.0% | Jul 9, 2020 | In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 1... |
| CVE-2020-5366 | MEDIUM | 6.5 | 1.8% | Jul 9, 2020 | Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious us... |
| CVE-2020-12424 | MEDIUM | 6.5 | 1.4% | Jul 9, 2020 | When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, a... |
| CVE-2020-11992 | — | — | — | Jul 9, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-9377 | HIGH | 8.8 | 21.3% | Jul 9, 2020 | D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability onl... |
| CVE-2020-9376 | HIGH | 7.5 | 16.6% | Jul 9, 2020 | D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php. NOTE... |
| CVE-2020-5604 | HIGH | 8.1 | 2.0% | Jul 9, 2020 | Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a re... |
| CVE-2020-5974 | HIGH | 7.8 | 0.3% | Jul 8, 2020 | NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are i... |
| CVE-2020-15073 | MEDIUM | 5.4 | 0.7% | Jul 8, 2020 | An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section v... |
| CVE-2020-15072 | HIGH | 8.8 | 1.2% | Jul 8, 2020 | An issue was discovered in phpList through 3.5.4. An error-based SQL Injection vulnerability exists via the Import Admin... |
| CVE-2020-2034 | HIGH | 8.1 | 6.6% | Jul 8, 2020 | An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacke... |
| CVE-2020-2031 | MEDIUM | 4.9 | 1.1% | Jul 8, 2020 | An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated ad... |
| CVE-2020-2030 | HIGH | 7.2 | 2.5% | Jul 8, 2020 | An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to exe... |
| CVE-2020-1982 | MEDIUM | 4.8 | 0.4% | Jul 8, 2020 | Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a cryp... |
| CVE-2020-6938 | HIGH | 7.5 | 1.2% | Jul 8, 2020 | A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26,... |
| CVE-2020-5839 | HIGH | 7.5 | 2.0% | Jul 8, 2020 | Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now