2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9483 | HIGH | 7.5 | 34.6% | Jun 30, 2020 | **Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is ... |
| CVE-2020-14957 | HIGH | 7.8 | 0.4% | Jun 30, 2020 | In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) ... |
| CVE-2020-14956 | HIGH | 7.8 | 0.4% | Jun 30, 2020 | In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) ... |
| CVE-2020-7816 | HIGH | 7.8 | 1.4% | Jun 30, 2020 | A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticate... |
| CVE-2020-15415 | CRITICAL | 9.8 | 84.6% | Jun 30, 2020 | On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote... |
| CVE-2020-15412 | MEDIUM | 4.3 | 0.7% | Jun 30, 2020 | An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding ... |
| CVE-2020-15411 | CRITICAL | 9.8 | 1.4% | Jun 30, 2020 | An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the atta... |
| CVE-2020-15401 | MEDIUM | 4.4 | 0.4% | Jun 30, 2020 | IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious fl... |
| CVE-2020-15400 | MEDIUM | 4.3 | 0.4% | Jun 30, 2020 | CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS. |
| CVE-2020-15397 | HIGH | 7.8 | 0.5% | Jun 30, 2020 | HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileg... |
| CVE-2020-15396 | HIGH | 7.8 | 0.4% | Jun 30, 2020 | In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. B... |
| CVE-2020-5603 | HIGH | 7.5 | 1.3% | Jun 30, 2020 | Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Conf... |
| CVE-2020-5602 | HIGH | 7.5 | 1.4% | Jun 30, 2020 | Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configura... |
| CVE-2020-5601 | HIGH | 8.8 | 1.6% | Jun 30, 2020 | Chrome Extension for e-Tax Reception System Ver1.0.0.0 allows remote attackers to execute an arbitrary command via unspe... |
| CVE-2020-5588 | MEDIUM | 4.9 | 1.0% | Jun 30, 2020 | Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to obtain uninten... |
| CVE-2020-5587 | MEDIUM | 6.5 | 1.1% | Jun 30, 2020 | Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vecto... |
| CVE-2020-5586 | MEDIUM | 4.8 | 0.5% | Jun 30, 2020 | Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject ... |
| CVE-2020-5585 | MEDIUM | 4.8 | 0.5% | Jun 30, 2020 | Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject a... |
| CVE-2020-5584 | HIGH | 7.5 | 1.3% | Jun 30, 2020 | Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors. |
| CVE-2020-5583 | MEDIUM | 6.5 | 1.0% | Jun 30, 2020 | Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized M... |
| CVE-2020-5582 | MEDIUM | 4.3 | 0.8% | Jun 30, 2020 | Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for th... |
| CVE-2020-5581 | MEDIUM | 6.5 | 1.8% | Jun 30, 2020 | Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended ... |
| CVE-2020-5580 | HIGH | 8.1 | 1.1% | Jun 30, 2020 | Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Sin... |
| CVE-2020-15395 | HIGH | 7.8 | 1.1% | Jun 30, 2020 | In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multi... |
| CVE-2020-15393 | MEDIUM | 5.5 | 0.4% | Jun 29, 2020 | In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebe... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now