2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13279 | HIGH | 8.6 | 1.2% | Jun 22, 2020 | Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system |
| CVE-2020-13888 | MEDIUM | 5.4 | 0.5% | Jun 22, 2020 | Kordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and user_management.php. |
| CVE-2020-8933 | HIGH | 7.8 | 0.4% | Jun 22, 2020 | A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is on... |
| CVE-2020-8907 | HIGH | 7.8 | 0.3% | Jun 22, 2020 | A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is on... |
| CVE-2020-8903 | HIGH | 7.8 | 0.3% | Jun 22, 2020 | A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is on... |
| CVE-2020-14461 | HIGH | 8.6 | 9.5% | Jun 22, 2020 | Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI. |
| CVE-2020-14204 | HIGH | 8.2 | 1.9% | Jun 22, 2020 | In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local f... |
| CVE-2020-14203 | HIGH | 8.8 | 0.5% | Jun 22, 2020 | WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users ... |
| CVE-2020-14202 | MEDIUM | 6.1 | 0.7% | Jun 22, 2020 | WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters. |
| CVE-2020-14969 | HIGH | 7.5 | 1.3% | Jun 22, 2020 | app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the att... |
| CVE-2020-14968 | CRITICAL | 9.8 | 2.9% | Jun 22, 2020 | An issue was discovered in the jsrsasign package before 8.0.17 for Node.js. Its RSASSA-PSS (RSA-PSS) implementation does... |
| CVE-2020-14967 | CRITICAL | 9.8 | 2.6% | Jun 22, 2020 | An issue was discovered in the jsrsasign package before 8.0.18 for Node.js. Its RSA PKCS1 v1.5 decryption implementation... |
| CVE-2020-14966 | HIGH | 7.5 | 1.1% | Jun 22, 2020 | An issue was discovered in the jsrsasign package through 8.0.18 for Node.js. It allows a malleability in ECDSA signature... |
| CVE-2020-8102 | HIGH | 8.8 | 1.1% | Jun 22, 2020 | Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an ex... |
| CVE-2020-7262 | MEDIUM | 5.5 | 0.7% | Jun 22, 2020 | Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view... |
| CVE-2020-3676 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapdr... |
| CVE-2020-3665 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firm... |
| CVE-2020-3663 | CRITICAL | 9.8 | 0.9% | Jun 22, 2020 | Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdra... |
| CVE-2020-3662 | CRITICAL | 9.8 | 0.9% | Jun 22, 2020 | Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snap... |
| CVE-2020-3661 | CRITICAL | 9.8 | 0.9% | Jun 22, 2020 | Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due... |
| CVE-2020-3660 | CRITICAL | 9.8 | 0.9% | Jun 22, 2020 | Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto,... |
| CVE-2020-3658 | CRITICAL | 9.1 | 0.9% | Jun 22, 2020 | Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto,... |
| CVE-2020-3642 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL a... |
| CVE-2020-3635 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto, Snap... |
| CVE-2020-3628 | CRITICAL | 9.8 | 1.0% | Jun 22, 2020 | Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consu... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now