2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15535 | MEDIUM | 6.1 | 1.2% | Jul 5, 2020 | An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur ... |
| CVE-2020-15466 | HIGH | 7.5 | 3.1% | Jul 5, 2020 | In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/pa... |
| CVE-2020-15530 | HIGH | 7.8 | 0.5% | Jul 5, 2020 | An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM p... |
| CVE-2020-15529 | HIGH | 7.8 | 1.0% | Jul 5, 2020 | An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a g... |
| CVE-2020-15528 | HIGH | 7.8 | 1.3% | Jul 5, 2020 | An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or un... |
| CVE-2020-15523 | HIGH | 7.8 | 0.9% | Jul 4, 2020 | In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan hors... |
| CVE-2020-7284 | HIGH | 7.8 | 0.4% | Jul 3, 2020 | Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to ga... |
| CVE-2020-10282 | CRITICAL | 9.8 | 1.7% | Jul 3, 2020 | The Micro Air Vehicle Link (MAVLink) protocol presents no authentication mechanism on its version 1.0 (nor authorization... |
| CVE-2020-10281 | HIGH | 7.5 | 0.7% | Jul 3, 2020 | This vulnerability applies to the Micro Air Vehicle Link (MAVLink) protocol and allows a remote attacker to gain access ... |
| CVE-2020-7283 | HIGH | 8.8 | 0.6% | Jul 3, 2020 | Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edi... |
| CVE-2020-7282 | MEDIUM | 6.3 | 0.3% | Jul 3, 2020 | Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to delete files t... |
| CVE-2020-7281 | MEDIUM | 6.3 | 0.2% | Jul 3, 2020 | Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files... |
| CVE-2020-15518 | HIGH | 8.8 | 1.0% | Jul 3, 2020 | VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, w... |
| CVE-2020-14173 | MEDIUM | 5.4 | 0.9% | Jul 3, 2020 | The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject ... |
| CVE-2020-14172 | CRITICAL | 9.8 | 2.5% | Jul 3, 2020 | This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity templ... |
| CVE-2020-15469 | LOW | 2.3 | 0.4% | Jul 2, 2020 | In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. |
| CVE-2020-8188 | HIGH | 8.8 | 1.3% | Jul 2, 2020 | We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and U... |
| CVE-2020-8185 | MEDIUM | 6.5 | 2.2% | Jul 2, 2020 | A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations ... |
| CVE-2020-8179 | MEDIUM | 4.1 | 0.6% | Jul 2, 2020 | Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks. |
| CVE-2020-8176 | MEDIUM | 6.1 | 1.0% | Jul 2, 2020 | A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS pay... |
| CVE-2020-8166 | MEDIUM | 4.3 | 1.7% | Jul 2, 2020 | A CSRF forgery vulnerability exists in rails < 5.2.5, rails < 6.0.4 that makes it possible for an attacker to, given a g... |
| CVE-2020-8163 | HIGH | 8.8 | 83.1% | Jul 2, 2020 | The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the... |
| CVE-2020-8161 | HIGH | 8.6 | 3.6% | Jul 2, 2020 | A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerabi... |
| CVE-2020-4074 | CRITICAL | 9.8 | 1.8% | Jul 2, 2020 | In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is... |
| CVE-2020-4061 | MEDIUM | 5.4 | 0.8% | Jul 2, 2020 | In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froa... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now