2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6504 | MEDIUM | 4.3 | 0.5% | Jun 3, 2020 | Insufficient policy enforcement in notifications in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to by... |
| CVE-2020-6503 | MEDIUM | 6.5 | 0.7% | Jun 3, 2020 | Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtai... |
| CVE-2020-6502 | MEDIUM | 6.5 | 0.7% | Jun 3, 2020 | Incorrect implementation in permissions in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof securi... |
| CVE-2020-6501 | MEDIUM | 6.5 | 0.7% | Jun 3, 2020 | Insufficient policy enforcement in CSP in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass conten... |
| CVE-2020-6500 | MEDIUM | 6.5 | 0.7% | Jun 3, 2020 | Inappropriate implementation in interstitials in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof ... |
| CVE-2020-6499 | MEDIUM | 6.5 | 0.7% | Jun 3, 2020 | Inappropriate implementation in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass AppC... |
| CVE-2020-6498 | MEDIUM | 6.5 | 0.9% | Jun 3, 2020 | Incorrect implementation in user interface in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to pe... |
| CVE-2020-6497 | MEDIUM | 6.5 | 0.8% | Jun 3, 2020 | Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to pe... |
| CVE-2020-6496 | HIGH | 8.8 | 1.4% | Jun 3, 2020 | Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perf... |
| CVE-2020-6495 | MEDIUM | 6.5 | 1.1% | Jun 3, 2020 | Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convin... |
| CVE-2020-6494 | MEDIUM | 6.5 | 1.5% | Jun 3, 2020 | Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof t... |
| CVE-2020-6493 | CRITICAL | 9.6 | 1.7% | Jun 3, 2020 | Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised... |
| CVE-2020-6453 | HIGH | 8.8 | 0.9% | Jun 3, 2020 | Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially expl... |
| CVE-2020-6419 | HIGH | 8.8 | 0.7% | Jun 3, 2020 | Out of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap c... |
| CVE-2020-11091 | MEDIUM | 5.8 | 0.9% | Jun 3, 2020 | In Weave Net before version 2.6.3, an attacker able to run a process as root in a container is able to respond to DNS re... |
| CVE-2020-11080 | HIGH | 7.5 | 5.3% | Jun 3, 2020 | In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of ... |
| CVE-2020-5299 | MEDIUM | 5.1 | 1.0% | Jun 3, 2020 | In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, any users with the ability to... |
| CVE-2020-5298 | MEDIUM | 4.8 | 0.9% | Jun 3, 2020 | In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, a user with the ability to us... |
| CVE-2020-5297 | LOW | 2.7 | 1.2% | Jun 3, 2020 | In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this ... |
| CVE-2020-5296 | MEDIUM | 4.9 | 1.4% | Jun 3, 2020 | In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this ... |
| CVE-2020-5295 | MEDIUM | 4.9 | 7.4% | Jun 3, 2020 | In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this ... |
| CVE-2020-13798 | MEDIUM | 6.1 | 0.7% | Jun 3, 2020 | An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/f... |
| CVE-2020-13797 | MEDIUM | 6.1 | 0.7% | Jun 3, 2020 | An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/w... |
| CVE-2020-13796 | MEDIUM | 6.1 | 0.7% | Jun 3, 2020 | An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/s... |
| CVE-2020-13795 | MEDIUM | 5.3 | 1.8% | Jun 3, 2020 | An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/temp... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now