2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6264 | HIGH | 7.5 | 1.0% | Jun 10, 2020 | SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions whi... |
| CVE-2020-6263 | CRITICAL | 9.8 | 1.4% | Jun 10, 2020 | Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10,... |
| CVE-2020-6260 | MEDIUM | 5.3 | 0.8% | Jun 10, 2020 | SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed ... |
| CVE-2020-6246 | MEDIUM | 6.1 | 0.7% | Jun 10, 2020 | SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750, ... |
| CVE-2020-6239 | MEDIUM | 4.4 | 0.3% | Jun 10, 2020 | Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permission... |
| CVE-2020-4436 | HIGH | 7.5 | 3.1% | Jun 10, 2020 | Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attac... |
| CVE-2020-4435 | HIGH | 7.5 | 1.6% | Jun 10, 2020 | Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which ... |
| CVE-2020-4434 | HIGH | 7.5 | 2.6% | Jun 10, 2020 | Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentic... |
| CVE-2020-4433 | HIGH | 7.5 | 5.1% | Jun 10, 2020 | Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. Thi... |
| CVE-2020-4432 | HIGH | 7.5 | 3.4% | Jun 10, 2020 | Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an att... |
| CVE-2020-7280 | HIGH | 7.8 | 0.4% | Jun 10, 2020 | Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 P... |
| CVE-2020-7279 | HIGH | 7.8 | 0.4% | Jun 10, 2020 | DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS... |
| CVE-2020-13996 | HIGH | 8.8 | 1.3% | Jun 9, 2020 | The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager. |
| CVE-2020-8337 | MEDIUM | 6.7 | 0.4% | Jun 9, 2020 | An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app as... |
| CVE-2020-8336 | MEDIUM | 6.8 | 0.3% | Jun 9, 2020 | Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmwar... |
| CVE-2020-8334 | MEDIUM | 6.8 | 0.3% | Jun 9, 2020 | The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which... |
| CVE-2020-8331 | — | — | — | Jun 9, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-8323 | MEDIUM | 6.7 | 0.3% | Jun 9, 2020 | A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStatio... |
| CVE-2020-8322 | MEDIUM | 6.7 | 0.3% | Jun 9, 2020 | A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkSt... |
| CVE-2020-8321 | MEDIUM | 6.7 | 0.3% | Jun 9, 2020 | A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Not... |
| CVE-2020-8320 | MEDIUM | 6.8 | 0.3% | Jun 9, 2020 | An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. |
| CVE-2020-1348 | MEDIUM | 6.5 | 5.2% | Jun 9, 2020 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m... |
| CVE-2020-1343 | MEDIUM | 5.9 | 2.8% | Jun 9, 2020 | An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plai... |
| CVE-2020-1340 | MEDIUM | 5.4 | 1.6% | Jun 9, 2020 | A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka '... |
| CVE-2020-1334 | HIGH | 7.8 | 0.7% | Jun 9, 2020 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now