2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-4020HIGH7.2The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who cont...
CVE-2020-4019HIGH7.8The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the ap...
CVE-2020-4018HIGH8.8The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to complete the setup...
CVE-2020-4017MEDIUM5.3The /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible bef...
CVE-2020-4016MEDIUM5.3The /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before ve...
CVE-2020-4015MEDIUM4.3The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers...
CVE-2020-4014MEDIUM4.3The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to r...
CVE-2020-4013MEDIUM5.4The review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to inject arbitrary H...
CVE-2020-8482MEDIUM5.5Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauth...
CVE-2020-7654HIGH7.5All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. It logs private keys if logging level ...
CVE-2020-7650MEDIUM6.5All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows ar...
CVE-2020-7648MEDIUM6.5All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for user...
CVE-2020-6937HIGH7.5A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allo...
CVE-2020-11844CRITICAL9.8Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybri...
CVE-2020-7653MEDIUM6.5All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for user...
CVE-2020-7652MEDIUM6.5All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for user...
CVE-2020-7651MEDIUM4.3All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users ...
CVE-2020-1831LOW2.4HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195(SP31C00E74R3P8) have an improper authorization vulnerab...
CVE-2020-3959LOW3.3VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1....
CVE-2020-3958MEDIUM5.5VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5....
CVE-2020-3957HIGH7VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5....
CVE-2020-1870HIGH7.5There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage ma...
CVE-2020-1833LOW2.4Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. A ...
CVE-2020-1832HIGH8.8E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnera...
CVE-2020-1809MEDIUM4.6HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143(C00E143R2P4) have an information disclosure vulnerabili...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now