2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15029 | MEDIUM | 5.4 | 0.6% | Jul 7, 2020 | NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja... |
| CVE-2020-15028 | MEDIUM | 5.4 | 0.6% | Jul 7, 2020 | NeDi 1.9C is vulnerable to a cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary ... |
| CVE-2020-11882 | MEDIUM | 6.1 | 1.0% | Jul 7, 2020 | The O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to other applications. Th... |
| CVE-2020-15037 | MEDIUM | 5.4 | 0.5% | Jul 7, 2020 | NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja... |
| CVE-2020-15036 | MEDIUM | 5.4 | 0.5% | Jul 7, 2020 | NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja... |
| CVE-2020-15584 | MEDIUM | 5.5 | 0.3% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can trigger an out-of-bounds access a... |
| CVE-2020-15583 | MEDIUM | 5.5 | 0.2% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. StickerProvider allows dire... |
| CVE-2020-15582 | MEDIUM | 5.5 | 0.3% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 7885 chipsets) software. The Bluetooth... |
| CVE-2020-15581 | MEDIUM | 5.3 | 0.3% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The kernel logging feature ... |
| CVE-2020-15580 | MEDIUM | 5.5 | 0.1% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factor... |
| CVE-2020-15579 | HIGH | 7.5 | 0.4% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factor... |
| CVE-2020-15578 | MEDIUM | 5.5 | 0.1% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with O(8.x) software. FactoryCamera does not properly restrict runtime... |
| CVE-2020-15577 | MEDIUM | 5.5 | 0.1% | Jul 7, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Cameralyzer allows attackers to writ... |
| CVE-2020-15576 | HIGH | 7.5 | 1.5% | Jul 7, 2020 | SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response. |
| CVE-2020-15575 | MEDIUM | 6.1 | 1.5% | Jul 7, 2020 | SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194. |
| CVE-2020-15574 | HIGH | 7.5 | 1.5% | Jul 7, 2020 | SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893. |
| CVE-2020-15573 | MEDIUM | 6.1 | 1.5% | Jul 7, 2020 | SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421. |
| CVE-2020-15525 | MEDIUM | 5.3 | 1.1% | Jul 7, 2020 | GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint. |
| CVE-2020-15517 | MEDIUM | 5.4 | 0.6% | Jul 7, 2020 | The ke_search (aka Faceted Search) extension through 2.8.2, and 3.x through 3.1.3, for TYPO3 allows XSS. |
| CVE-2020-15516 | MEDIUM | 5.4 | 0.4% | Jul 7, 2020 | The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF. |
| CVE-2020-15514 | MEDIUM | 5.4 | 0.6% | Jul 7, 2020 | The jh_captcha extension through 2.1.3, and 3.x through 3.0.2, for TYPO3 allows XSS. |
| CVE-2020-15513 | MEDIUM | 5.3 | 0.8% | Jul 7, 2020 | The typo3_forum extension before 1.2.1 for TYPO3 has Incorrect Access Control. |
| CVE-2020-15509 | MEDIUM | 6.5 | 0.5% | Jul 7, 2020 | Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android (as used by nRF Connec... |
| CVE-2020-15392 | MEDIUM | 5.3 | 1.2% | Jul 7, 2020 | A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recove... |
| CVE-2020-15367 | CRITICAL | 9.8 | 2.0% | Jul 7, 2020 | Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts. An unauthenticated user may exploit th... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now